9507 matches found
conceicaodotocantins.to.gov.br Cross Site Scripting vulnerability OBB-1255700
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| conceicaodotocantins.to.gov.br ---|---...
EJUCMS of Hainan EJU Technology Co., Ltd. suffers from xss vulnerability (CNVD-2020-51478)
Eju Real Estate System EjuCMS is a localized O2O real estate website platform system, where users can quickly find their suitable listings, and real estate agents promote their exclusive properties for sale, and so on. Hainan Eju Technology Co., Ltd EJUCMS exists xss vulnerability, attackers can...
ThinkSAAS open source community ThinkSAAS has xss vulnerability
ThinkSAAS open source community is a lightweight open source community system , is a community system that can be used to build discussion groups , bbs and circles . thinksaas open source community thinksaas xss vulnerability , attackers can use the vulnerability to obtain sensitive information...
Stored Cross-Site Scripting Vulnerability in bayonet
bayonet is a src asset management system, an all-in-one asset management system from subdomains, port services, vulnerabilities, crawlers and more. bayonet suffers from a stored cross-site scripting vulnerability. An attacker can exploit the vulnerability to obtain sensitive information such as...
Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.
PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...
Ejucms front-end storage-type cross-site scripting vulnerability
Ejucms Real Estate System Ejucms is a localized O2O real estate website platform system. Hainan Ejucms Ejucms front-end storage-type cross-site scripting vulnerabilities. Attackers can use the vulnerability to obtain sensitive information such as administrator cookies...
The vulnerability of the Global Protect Agent’s endpoint protection software lies in the lack of protection for service data, which allows attackers to read VPN cookie information.
The vulnerability of the reporting component of the Global Protect Agent for Linux software lies in the lack of protection for service data. Exploiting this vulnerability could allow attackers to read VPN cookie information...
XSS Vulnerability in RGCMS
RGCMS is a PHP building management system. RGCMS suffers from an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...
CVE-2020-15135
save-server npm package before version 1.05 is affected by a CSRF vulnerability, as there is no CSRF mitigation Tokens etc.. The fix introduced in version version 1.05 unintentionally breaks uploading so version v1.0.7 is the fixed version. This is patched by implementing Double submit. The CSRF...
All Vulnerabilities for blumenau.sc.gov.br Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| blumenau.sc.gov.br ---|--- Open Bug...
All Vulnerabilities for bomretirodosul.rs.gov.br Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| bomretirodosul.rs.gov.br ---|--- Open B...
Bumble: XSS DI BIODATA
I did the injection with payload see mp4, I did the 1st and 2nd experiments. Sorry for the 1st experiment, I didn't video. When I did the first injection, there was an error after pressing the OK button. Impact the impact could have been someone who stole cookies...
Updated ruby-rack packages fix security vulnerability
A reliance on cookies without validation/integrity check security vulnerability exists in rack 2.2.3 that makes it is possible for an attacker to forge a secure or host-only cookie prefix CVE-2020-8184...
CVE-2020-15128
In OctoberCMS before version 1.0.468, encrypted cookie values were not tied to the name of the cookie the value belonged to. This meant that certain classes of attacks that took advantage of other theoretical vulnerabilities in user facing code nothing exploitable in the core project itself had a...
XSS Vulnerability in the Merchant Center Function of Self-defined Easy Web-based Mall System
Zhongshan City, since the easy network technology limited company is a customer-centered development, the heart to help businesses make money professional website service provider. There is an XSS vulnerability in the merchant center function of Zidinoyi's online shopping mall type system...
uDork - Tool That Uses Advanced Google Search Techniques To Obtain Sensitive Information In Files Or Directories, Find IoT Devices, Detect Versions Of Web Applications, And So On
uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on. uDork does NOT make attacks against any server, it only uses predefined dorks and/or...
XSS Vulnerability in IF Cloud Technology's Website Builder Showcase System
Fuzhou Yihu Cloud Technology Co. was founded on December 17, 2018 . The company's business scope includes: application software development; cloud software services; information technology consulting services; technology development, technology transfer, technology consulting, and technology...
libvirt: leak of sensitive cookie information via dumpxml
An information disclosure vulnerability was found in libvirt. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw could allow a malicious user with a read-only connection to access potentially sensitive information in the domain configuration...
XSS Vulnerability in Xi'an Bailian Network Technology Co.
Xi'an BaiLian Network Technology Co., Ltd. was established on August 13, 2010, and its main business includes Internet information service business. Xi'an Bailian Network Technology Co., Ltd. website building system has XSS vulnerability, attackers can use the vulnerability to obtain sensitive...