Zenphoto cross-site scripting vulnerability (CNVD-2020-32727)

Zenphoto is a content management system CMS. The Zenphoto cross-site scripting vulnerability can be exploited by an attacker to obtain user cookie information...

MGASA-2020-0245 Updated libzypp packages fix security vulnerability

Libzypp from mageia 7 is affected by a security issue. This update fixes this. Incorrect Default Permissions vulnerability in libzypp allowed local attackers to read a cookie store used by libzypp, exposing private cookies...

Updated libzypp packages fix security vulnerability

Libzypp from mageia 7 is affected by a security issue. This update fixes this. Incorrect Default Permissions vulnerability in libzypp allowed local attackers to read a cookie store used by libzypp, exposing private cookies...

Genesis has an XSS vulnerability

Genesis is based on Spring + Spring MVC + Mybatis to build the developer community , forum system . Genesis has an XSS vulnerability that can be exploited by an attacker to obtain sensitive information such as user cookies...

XSS Vulnerability in Xinhuo OA Office System

Xinhu OA office system is an open source online office system. XSS vulnerability exists in Xinhuo OA Office System, which can be exploited by attackers to obtain administrator cookies...

XSS Vulnerability in My-Blog-layui

My-Blog-layui by SpringBoot + Layui + Mybatis + Thymeleaf and other technologies to achieve the Java blog system . My-Blog-layui has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS has a stored cross-site scripting vulnerability. An attacker can exploit the vulnerability to obtain an administrator cookie...

CVE-2020-4229

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211...

CVE-2020-4229

CVE-2020-4229 affects IBM Worklight/MobileFoundation (8.0.0.0). The root cause is improper invalidation of the session cookie on logout, enabling possible unauthorized access to a user’s session. The IBM Security bulletin confirms the vulnerability and lists a fix for IBM MobileFirst Platform Fou...

CVE-2020-4229

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211...

Stored XSS Vulnerability in Jeesite Framework

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jeesite framework has a stored XSS vulnerability that can be exploited by an attacker to obtain administrator cookie information...

h1-ctf: [H1-2006 2020] Connecting the dots to send hackers their Bug Bounty

Hello team Thank you so much for organising the ctf it has helped a lot to learn and improve my knowledge now lets got to solution i have preapred short videos as a refrence for each part and broken down ctf in 8 challenges. So the ctf was broken into: 1. Gathering leaking to gain login credentia...

h1-ctf: [H1-2006 2020] 36 hours of brain cycles utilized on solving a neat puzzle

Here we go: F852423 Recon: The given scope is: .bountypay.h1ctf.com Found subdomains: bountypay.h1ctf.com api.bountypay.h1ctf.com app.bountypay.h1ctf.com software.bountypay.h1ctf.com staff.bountypay.h1ctf.com www.bountypay.h1ctf.com Relevant GitHub repository:...

ZrLog is vulnerable to XSS

ZrLog is a blog/CMS program developed in Java. ZrLog suffers from an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

XSS vulnerability in Extreme CMS (CNVD-2020-38477)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as administrator cookies...

XSS vulnerability in Extreme CMS (CNVD-2020-38476)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as administrator cookies...

Victor CMS 'comment_author' Cross-Site Scripting Vulnerability

Victor CMS is a PHP-based content management system CMS. Victor CMS 'commentauthor' cross-site scripting vulnerability. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2020-31092)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

WeiPHP suffers from XSS vulnerability (CNVD-2020-37939)

WeiPHP is a convenient and scalable open source WeChat public platform development framework, using it you can easily build a own WeChat public platform. WeiPHP XSS vulnerability , attackers can use the vulnerability to obtain sensitive information such as user cookies...

Multiple Storage-based Cross-site Scripting Vulnerabilities in DM Building System Frontend

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system front-end exists in a number of storage-based cross-site scripting vulnerabilities. Attackers can exploit the vulnerability to obta...