7174 matches found
internations.org XSS vulnerability
Vulnerable URL: https://www.internations.org/kampala-expats/forum/looking-for-a-shared-accomodation-1508087/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8652 VIP website status:| Yes...
Information Disclosure
Moodle is vulnerable to information disclosure. Authenticated attackers can view e-mail addresses through the forum or quiz modules...
Privilege Escalation
Moodle is vulnerable to privilege escalation attacks. The attacks exist because getforumdiscussions in mod/forum/externallib.php does not check for group permissions, allowing any authenticated users without permissions to get forum access...
forum.astrozone.fr XSS vulnerability
Vulnerable URL: http://forum.astrozone.fr/forum/post.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check forum.astrozone.fr SS...
Information Disclosure
Moodle is vulnerable to information disclosure. The attacks exist because the forumprintlatestdiscussions function in mod/forum/lib.php does not check for individual answer-posting requirements. This allows a authenticated user to view the username of the user who last posted without permission...
Bad Code Library Triggers Devil's Ivy Vulnerability in Millions of IoT Devices
Tens of millions of products ranging from airport surveillance cameras, sensors, networking equipment and IoT devices are vulnerable to a flaw that allows attackers to remotely gain control over devices or crash them. The vulnerability, dubbed Devil’s Ivy, was identified by researchers at Senrio...
forum.musixmatch.com XSS vulnerability
Vulnerable URL: https://forum.musixmatch.com/" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check forum.musixmatch.com SSL connection:| Grade: B+ Coordinated...
phpbb Cross Site Scripting Vulnerability
phpBB is phpBB group developed a set of open-source use of PHP language development of Web forum software . The software has support for multiple languages , support for multiple databases and customized layout and so on. phpBB has a cross-site scripting vulnerability. Attackers can use this...
forum.astrozone.fr XSS vulnerability
Vulnerable URL: http://forum.astrozone.fr/forum/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check forum.astrozone.fr S...
Google to Fully Distrust WoSign/StartCom SSL Certs in Chrome 61
Websites that are still using digital certificates issued by Chinese Certificate Authority WoSign may want to accelerate their plans to replace those certs. Google last week said it will fully distrust remaining certificates issued by the CA starting with Chrome 61. Devon O’Brien of the Chrome...
Arbitrary File Download Vulnerability in javaee Forum System
javaee forum system is a free open source javaee forum source code system , using springMVC mybatis framework development. javaee forum system has an arbitrary file download vulnerability , an attacker can forge files through the path in the request to download the site configuration or system...
Automated posting on Vkontakte public pages using VK API and Python
Vk.com Vkontakte is the most popular social network Russia and Ex-USSR with 430+ million users. Originally it was a Facebook clone. But now, after 10 years of development, these two services are quite different from each other. Traditional advantages of vk.com - huge amount of free music and vide...
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
Authorization
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
CVE-2017-4999
CVE-2017-4999 pertains to EMC RSA Archer across multiple 5.x releases (e.g., 5.4.1.3, 5.5.x). The vulnerability is an authorization bypass in the Discussion Forum Messages component caused by handling of input via user-controlled keys, enabling a remote, low-privileged attacker to elevate privile...
EMC RSA Archer Privilege Bypass Vulnerability
EMC RSA Archer is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A privilege bypass vulnerability exists in EMC RSA Archer. A remote...