Oracle WebLogic HTTP Detection

Oracle formerly BEA WebLogic, a Java EE application server, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid109553; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Oracle WebLogic HTTP Detection";...

Oracle WebLogic SNMP Detection (TCP)

Oracle WebLogic, a Java EE application server, was detected on the remote host. TRUSTED...

Oracle WebLogic SNMP Detection (UDP)

Oracle WebLogic, a Java EE application server, was detected on the remote host. TRUSTED...

auto24.ee XSS vulnerability

Open Bug Bounty ID: OBB-557719 Description| Value ---|--- Affected Website:| auto24.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

ladu24.ee XSS vulnerability

Open Bug Bounty ID: OBB-531397 Description| Value ---|--- Affected Website:| ladu24.ee Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tallinn.kontakt.ee XSS vulnerability

Open Bug Bounty ID: OBB-501386 Description| Value ---|--- Affected Website:| tallinn.kontakt.ee Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

wildPwn - Brute forcer and shell deployer for WildFly (JBoss AS)

WildFly, formerly known as JBoss AS, or simply JBoss, is an application server authored by JBoss, now developed by Red Hat. WildFly is written in Java, and implements the Java Platform, Enterprise Edition Java EE specification. It runs on multiple platforms. WildFly is free and open-source...

ladu24.ee XSS vulnerability

Open Bug Bounty ID: OBB-410651 Description| Value ---|--- Affected Website:| ladu24.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

arvutitark.ee XSS vulnerability

Open Bug Bounty ID: OBB-357501 Description| Value ---|--- Affected Website:| arvutitark.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Apache Tomcat Patches Important Remote Code Execution Flaw

The Apache Tomcat team has recently patched several security vulnerabilities in Apache Tomcat, one of which could allow an unauthorised attacker to execute malicious code on affected servers remotely. Apache Tomcat, developed by the Apache Software Foundation ASF, is an open source web server and...

CVE-2015-8707: Exposure of Sensitive Information to an Unauthorized Actor

Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field...

PT-2017-7468

Name of the Vulnerable Software and Affected Versions Magento CE versions prior to 1.9.2.2 Magento EE versions prior to 1.14.2.2 Description The issue allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field, as password reset tokens are...

lambre24.ee XSS vulnerability

Open Bug Bounty ID: OBB-296443 Description| Value ---|--- Affected Website:| lambre24.ee Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

EE 4GEE WiFi MBB Cross-Site Request Forgery Vulnerability (CNVD-2017-33216)

The EE 4GEE WiFi MBB is a mobile wireless router device from EE UK. A cross-site request forgery vulnerability exists in versions prior to EE 4GEE WiFi MBB EE600005.0031. A remote attacker can exploit this vulnerability to perform unauthorized operations by tricking a user into visiting a malicio...

EE 4GEE WiFi MBB Cross-Site Scripting Vulnerability

The EE 4GEE WiFi MBB is a mobile wireless router device from EE UK. A cross-site scripting vulnerability exists in versions prior to EE 4GEE WiFi MBB EE600005.0031, which stems from a lack of input validation or encryption in the program. A remote attacker can exploit the vulnerability to inject...

CVE-2017-14269

EE 4GEE WiFi MBB before EE600005.0031 devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content...

CVE-2017-14267

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14267

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14268

EE 4GEE WiFi MBB before EE600005.0031 devices have XSS in the smscontent parameter in a getSMSlist request...

Cross site request forgery (csrf)

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...