20059 matches found
ThinkReed F-RevoCRM Cross-Site Scripting Vulnerability
ThinkReed F-RevoCRM is an open source customer relationship management software from ThinkReed Japan. A cross-site scripting vulnerability exists in ThinkReed F-RevoCRM versions 6.0 through 6.5 patch6, which stems from the lack of proper validation of client-side data in the WEB application and c...
JVN#97325754: F-RevoCRM vulnerable to cross-site scripting
F-RevoCRM provided by ThinkingReed inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch according to the information provided by the developer. Apply Workaround Applying the...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
Cross site scripting
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-9556
CVE-2019-9556 affects FiberHome AN5506-04-F RP2669 devices. The vulnerability is a Cross-Site Scripting (XSS) issue in the web management interface, arising from insufficient input filtering in the application (stored XSS). Exploitation is discussed in public advisories and exploits (e.g., Exploi...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
f-inde.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1039150 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting f-inde.com website and it...
i-a-f-t.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1037931 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-a-f-t.net website and it...
SuperMicro X8STi-F Operating System Command Injection Vulnerability
The SuperMicro X8STi-F is a computer motherboard from SuperMicro USA. An operating system command injection vulnerability exists in the Virtual Media feature in the SuperMicro X8STi-F with IPMI firmware version 2.06 and BIOS version 02.68. An attacker can exploit this vulnerability to obtain a...
CVE-2019-19642
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...
Command injection
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...
CVE-2019-19642
CVE-2019-19642 affects SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68. The vulnerability in the Virtual Media feature allows OS command injection by authenticated attackers who can send HTTP POST requests to the IPMI interface at /rpc/setvmdrive.asp, including shell metach...
CVE-2019-19642
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...
Omron PLC 1.0.0 Denial Of Service
Exploit Title: Omron PLC 1.0.0 - Denial of Service PoC Google Dork: n/a Date: 2019-12-06 Exploit Author: n0b0dy Vendor Homepage: https://automation.omron.com, ia.omron.com Software Link: n/a Version: 1.0.0 Tested on: PLC f/w rev.: CJ2M v2.01 CWE-412 : Unrestricted Externally Accessible Lock CVE :...
lucie-f-zeven.e-monsite.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1026700 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2014-3875
The addto parameter to fup in Frams' Fast File EXchange FEX, aka fex before fex-2014053 allows remote attackers to conduct cross-site scripting XSS attacks...
CVE-2014-3875
The addto parameter to fup in Frams' Fast File EXchange FEX, aka fex before fex-2014053 allows remote attackers to conduct cross-site scripting XSS attacks...
CVE-2014-3875
The CVE-2014-3875 entry documents a cross-site scripting (XSS) vulnerability in Frams’ Fast File Exchange (F*EX, fex) prior to fex-2014053, where the addto parameter of fup can be exploited to inject HTML/headers. Debian DLA-68-1 confirms this issue and lists fixes for the fex package (versions a...
Unspecified Vulnerability in Blackview BV9000Pro-F
The Blackview BV9000Pro-F is a smartphone from Blackview of Hong Kong, China. A security vulnerability exists in the Blackview BV9000Pro-F build fingerprint: Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys in the com.mediatek. A security vulnerability exists in the...