GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...

hackazon

Hackazon Hackazon은 오늘날의 리치 클라이언트 및 모바일 애플리케이션에서 사용되는 것과 동일한 기술로 구축된 무료 취약 테스트 사이트이자 온라인 스토어프론트입니다. Hackazon은 AJAX 인터페이스, 엄격한 워크플로우, 그리고 동반 모바일 앱에서 사용되는 RESTful API를 갖추고 있어 IT 보안 전문가에게 독특하게 효과적인 훈련 및 테스트 환경을 제공합니다. 또한 SQL 인젝션, 크로스 사이트 스크립팅 등 여러분이 좋아하는 취약점들로 가득 차 있습니다. 오늘날의 웹 및 모바일 애플리케이션, 그리고 웹 서비...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

VulnerableGWTApp

脆弱なGWT Webアプリケーション これは、GWT入門ガイドで説明されているStockWatcherサンプルアプリケーションを、GWTの「拡張クラス（enhanced...

CVE-2026-101146

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

EUVD-2026-88538

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146 Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146 Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146

A security flaw exists in Eleveo Quality Management 9.7.0 within the GWT RPC Handler component. Specifically, the UtilsService.createAndSaveAudit function in the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService is vulnerable to information disclosure . An attacker can perform a manipulat...

PT-2026-102357

Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A security flaw in the GWT RPC Handler component allows remote information disclosure. The issue resides in the UtilsService.createAndSaveAudit function within the...

CVE-2026-101146: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

EUVD-2014-8507

Malware in sbrugna...

CVE-2020-5804

Marvell QConvergeConsole GUI = 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this...

CVE-2014-8671

Cross-site scripting XSS vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote attackers to inject arbitrary web script or HTML via a crafted Bluetooth Device Name field...

CVE-2024-12680

The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-12679

The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-12680

The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-12679

The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-12679

The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-12680 Prisna GWT < 1.4.14 - Admin+ Stored XSS

The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...