CVE-2018-17571

Vanilla before 2.6.1 allows XSS via the email field of a profile...

Dropbox: Stored XSS in dropboxforum.com

This report described a vulnerability where an attacker could put a specially crafted payload into the reply section of threads on dropboxforum.com to bypass the HTML filter on the site. This enabled a stored XSS attack against anyone viewing the message. This was an issue in Lithium forum...

Thousands of Breached Websites Turn Up On MagBo Black Market

A newly-discovered underground marketplace has been peddling access to more than 3,000 breached websites, catering to hackers hungry for valuable data and the ability to launch a range of attacks on unsuspecting site visitors. Advertisements for the Russian-speaking marketplace called MagBo were...

MyBB 1.8.17 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB 1.8.17 - Cross-Site Scripting Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://mybb.com/download/ Version: 1.8.17 Tested on: Ubuntu 18.04 CVE: CVE-2018-15596 1. Description: On the forum RSS...

Gantry package 5.4.26 ,Other

Gantry package containing "Twig" library creates folders with improper folder permissions. On some servers this may lead to world writeable folders. see https://github.com/gantry/gantry5/issues/2363 https://github.com/twigphp/Twig/issues/2353 developer states not a security issue within their...

S-CMS School Website Builder System SQL Injection Vulnerability at Forum Page

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the forum page of the S-CMS School Building System. An attacker can exploit the vulnerability to...

S-CMS School Building System SQL Injection Vulnerability at Forum Page (CNVD-2018-19275)

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the forum page of the S-CMS School Building System. An attacker can exploit the vulnerability to...

Akamai India's StandTall Program

Diversity and Inclusion is a mission-critical goal at Akamai. In support of this goal, the India Learning and Development team in collaboration with the Women's Forum India employee resource group, launched an initiative that aims to foster a culture of...

wpForo < 1.5.2 - Privilege Escalation

The wpForo Forum WordPress plugin was affected by a Privilege Escalation security vulnerability...

coopcityinfo.com XSS vulnerability

Open Bug Bounty ID: OBB-671977 Description| Value ---|--- Affected Website:| coopcityinfo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm giving a book talk on Click Here to Kill Everybody at the Ford Foundation in New York City, on September 5, 2018. The Aspen Institute's Cybersecurity & Technology Program is holding a book launch for Click Here to Kill Everybod...

soniccharge.com XSS vulnerability

Open Bug Bounty ID: OBB-667919 Description| Value ---|--- Affected Website:| soniccharge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site request forgery (csrf)

my little forum 2.4.12 allows CSRF for deletion of users...

CVE-2018-15569

my little forum 2.4.12 allows CSRF for deletion of users...

CVE-2018-15569

CVE-2018-15569 affects the My Little Forum project (version 2.4.12). The issue is a Cross‑Site Request Forgery (CSRF) vulnerability that enables deletion of users. Root cause is not explicitly detailed in the provided documents beyond the CSRF description. Impact is user deletion via CSRF, with C...

CVE-2018-15569

my little forum 2.4.12 allows CSRF for deletion of users...

my little forum Cross-Site Request Forgery Vulnerability

my little forum is a set of Internet forum applications based on PHP and MySQL. The application uses a traditional tree view to display information and supports image uploading, template engine, BB code and emoticons. A cross-site request forgery vulnerability exists in my little forum version...

PT-2018-13094 · My Little Forum · My Little Forum

Name of the Vulnerable Software and Affected Versions: my little forum version 2.4.12 Description: The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to the deletion of users. Recommendations: For my little forum version 2.4.12, update to a newer version that contains a...

CVE-2018-15569: Cross-Site Request Forgery (CSRF)

my little forum 2.4.12 allows CSRF for deletion of users...

analitics.electric-forum.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-663442 Description| Value ---|--- Affected Website:| analitics.electric-forum.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...