PT-2020-14937 · Cellopoint · Cellopoint Cellos

Name of the Vulnerable Software and Affected Versions: Cellopoint Cellos version 4.1.10 Build 20190922 Description: The issue concerns improper validation of URL input. An attacker can manipulate the URL parameter using the cookie of an authenticated user to access arbitrary files on the system...

XSS Vulnerability in Hubei Nuoqianjin Network Technology Co.

Hubei Nuoqianjin Network Technology Co., Ltd. specializes in marketing website construction, SEO integration and promotion. Hubei Nuoyuanjin Network Technology Co., Ltd. station building system there are XSS vulnerabilities, attackers can use the vulnerability to obtain sensitive information such...

XSS Vulnerability in Fish Leap CMS

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. A XSS vulnerability exists in FishCenter CMS, which can be exploited by attackers to obtain sensitive information such as user cookies...

U.S. Dept Of Defense: Elmah.axd is publicly accessible and leaking Error Log for ROOT on █████_PRD_WEB1 █████████elmah.axd

Description: Hello, Security team, hope you are doing well. I found out that elmah.axd is publicly accessible on ████████ which is leaking error log which contain cookies and server code etc. Step-by-step Reproduction Instructions 1. Go to ██████elmah.axd and you will see the error logs. 2. Same...

XSS Vulnerability in Xingwangtong Online Chat Tool of Zhejiang Xingwang Baomingtong Network Co.

Zhejiang Xingwang Baomingtong Network Co., Ltd. is a national high-tech enterprise specializing in the development and operation of vertical website and the whole network marketing service for enterprises. Zhejiang Xingwang Baomingtong Network Co., Ltd. Xingwangtong online chat tool XSS...

Acronis: Stored XSS in backup scanning plan name

Dear Acronis Security Team, Summary: There is a possibility of storing an XSS on the https://mc-beta-cloud.acronis.com/ui/ console. Steps To Reproduce: 1. Login to the console with the given account 2. Go to "Backup Scanning" under "PLANS" 3. Click on "Create Plan" 4. Specify the location of the...

Home Villas <= 2.2 - Multiple Cross-Site Scripting Issues

An Unauthenticated Reflected & Authenticated Persistent XSS vulnerabilities were discovered in the Home Villas theme through 2.2 for WordPress. Edit WPScanTeam: July 27th, 2020 - Confirmed & Escalated to Envato July 28th, 2020 - Envato Investigating August 17th, 2020 - No updates, disclosing...

Wuxi Zhongschen Network Technology Co., Ltd. website building system has stored cross-site scripting vulnerabilities

Founded in Wuxi, Zongshen Network is a company that specializes in serving enterprises, with the mission of providing assistance to the development of Chinese enterprises. There is a stored cross-site scripting vulnerability in the website building system of Wuxi Zhongsichen Network Technology Co...

SharpChromium - .NET 4.0 CLR Project To Retrieve Chromium Data, Such As Cookies, History And Saved Logins

SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract: Cookies in JSON format History with associated cookies for each history item Saved Logins Note: All cookies returned are in JSON format. If you have th...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-46331)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the Content Provider in versions of Mozilla Firefox prior to 68.10.1 for Android-based platforms. An attacker can exploit the vulnerability to read local files and...

Laravel Telescope Information Disclosure Vulnerability

Laravel Telescope is erroneously publicly accessible. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:laravel:telescope"; if...

XSS Vulnerability in the Website Building System of Beijing ZhuoYan Technology Co.

Beijing Zhuoyan Technology Co., Ltd. is a technical enterprise providing self-service website building system. There is an XSS vulnerability in the website building system of Beijing ZhuoYan Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information such as user...

saogabriel.ms.gov.br Cross Site Scripting vulnerability OBB-1256901

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| saogabriel.ms.gov.br ---|--- Open Bug...

CVE-2020-15647

A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...

CVE-2020-15647

A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...

CVE-2020-15647

A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...

CVE-2020-15647

A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...

CVE-2020-15647

A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...

chapadadanatividade.to.gov.br Cross Site Scripting vulnerability OBB-1255703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| chapadadanatividade.to.gov.br ---|---...

conceicaodotocantins.to.gov.br Cross Site Scripting vulnerability OBB-1255700

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| conceicaodotocantins.to.gov.br ---|---...