parklandbookstore.com XSS vulnerability

Vulnerable URL: http://www.parklandbookstore.com/textbookexpress/gettxtexpress.asp?remote=1=2023==SUMMER%202017=CHE=106=1"...

Authentication flaw

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of Cisco Unified Contact Center Express UCCx could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affect...

CVE-2017-6722

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of Cisco Unified Contact Center Express UCCx could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affect...

Niushop open source mall system v1.05 beta 20170622 getMemberExpressAddress method has a SQL injection vulnerability

NiuShop open source mall system, is a PHP open source e-commerce system. Niushop open source mall system v1.05 beta 20170622 getMemberExpressAddress method SQL injection vulnerability. The vulnerability due to the system id parameter does not filter the data submitted by the user , a remote...

CVE-2017-6722: Improper Authentication

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of Cisco Unified Contact Center Express UCCx could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affect...

PT-2017-17274

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express UCCx versions 10.61 through 11.51.10000.60 Description A vulnerability in the Extensible Messaging and Presence Protocol XMPP service could allow an unauthenticated, remote attacker to masquerade as a...

Cisco Unified Contact Center Express Security Bypass Vulnerability

Cisco Unified Contact Center Express is a single-server, integrated contact center for formal and informal contact centers. A security bypass vulnerability exists in the Extensible Messaging and Presence Protocol XMPP service for Cisco Unified Contact Center Express UCCx, which can be exploited b...

Buffer Overflow Vulnerability in Multiple IBM DB2 Products

IBM DB2 Express Edition and so on are the products of the United States IBM Corporation. IBM DB2 Express Edition is a set of database server software; DB2 Connect Application Server Edition is a set of mainframe database system. A buffer overflow vulnerability exists in multiple IBM DB2 products....

chronicle-express.com XSS vulnerability

Open Bug Bounty ID: OBB-251084 Description| Value ---|--- Affected Website:| chronicle-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paris-express.com XSS vulnerability

Open Bug Bounty ID: OBB-250995 Description| Value ---|--- Affected Website:| paris-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rapid7 Metasploit Editions Cross-Site Scripting Vulnerability

Rapid7 Metasploit is an open source security vulnerability detection tool from Rapid7, Inc. Metasploit Express, Community and Pro are different versions. A cross-site request forgery vulnerability exists in Rapid7 Metasploit Express, Community, and Pro, which stems from the program failing to...

Cisco Unified Contact Center Express Clear Text Authentication Vulnerability

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of Cisco Unified Contact Center Express UCCx could allow an unauthenticated, remote attacker to masquerade as a legitimate user. The vulnerability is due to the XMPP service incorrectly processing an unsecured HTTP por...

bookstore.linnbenton.edu XSS vulnerability

Vulnerable URL: http://www.bookstore.linnbenton.edu/lbenton/textbookexpress/gettxtexpress.asp?remote=1=2023==SPRING%20ALBANY%202017=WR=121=1/-///'/"//--...

archive.indianexpress.com XSS vulnerability

Vulnerable URL: http://archive.indianexpress.com/gsearch.php?q=CAT%20UPSC%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:| XSS Vulnerability status:|...

Teradata Gateway and TD Express Security Vulnerabilities

Teradata Gateway and TD Express are both products of Teradata Corporation. The former is a gateway product and the latter is a free database software. A security vulnerability exists in Teradata Gateway and TD Express. A remote attacker could exploit this vulnerability to cause a denial of servic...

Threat Outbreak Alert RuleID29266: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53953 First Published: 2017 May 24 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29266 may contain the following files: Name | Size...

CVE-2015-5401

Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08Sles10 and 15.00.02.08Sles11 allow remote attackers to cause a denial of service database crash via a malformed CONFIG REQUEST message...

CVE-2015-5401

CVE-2015-5401 affects Teradata Gateway and TD Express. A remote attacker can cause a denial of service (database crash) by sending a malformed CONFIG REQUEST message. Affected versions: Teradata Gateway prior to 15.00.03.02-1 and 15.10.x prior to 15.10.00.01-1; TD Express prior to 15.00.02.08_Sle...

Concrete CMS: Stored XSS in Headline TextControl element in Express forms [ concrete5 8.1.0 ]

Intro Luke, I am your Crayons! Type of issue: Core CMS issue Level of severity: Internal Attack Vector Concrete5 version: 8.1.0 Summary There is Stored XSS vulnerability in Headline element of TextControl Express element. This vulnerability allows malicious user to embed JavaScript code and execu...

Ubiquiti Inc.: Directory traversal at https://nightly.ubnt.com

From within the http request function of the Acunetix and IronWasp programs I was able to view the passwd and hosts files at https://nightly.ubnt.com. Please see the attached screenshots for proof. I have tried to reproduce from within firefox and internet explorer without much luck however if yo...