CVE-2019-10221

A Reflected Cross Site Scripting vulnerability was found in the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute...

CVE-2019-10771

Characters in the GET url path are not properly escaped and can be reflected in the server response...

Design/Logic Flaw

Characters in the GET url path are not properly escaped and can be reflected in the server response...

CVE-2019-1010261

Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...

CVE-2019-1010261

Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...

Full-Access Token Leakage

github.com/minio/minio is vulnerable to full-access token leakage. The vulnerability exists because the full-access token is visible in the GET URL of a download request...

langrenn.njaard.no XSS vulnerability

Vulnerable URL: http://langrenn.njaard.no/Sponsor/get?placeHolder=5=200000195=1896=0=0=prompt/OPENBUGBOUNTY/...

lck.no XSS vulnerability

Vulnerable URL: http://www.lck.no/Sponsor/get?placeHolder=1=200000195=1827=0=0=prompt/OPENBUGBOUNTY/...

ilexpress.no XSS vulnerability

Vulnerable URL: http://www.ilexpress.no/Sponsor/get?placeHolder=1=200000195=1385=0=0=prompt/OPENBUGBOUNTY/...

ManageEngine SelfService Plus Cross Site Scripting

Exploit Title: Reflected XSS in ManageEngine SelfService Plus - 0day - Confirmed Google Dork: N/A Date: 29/5/2016 Exploit Author: Mohamed Saeed Contact: http://twitter.com/krmalab Website: http://www.dts-solution.com Vendor Homepage: https://www.manageengine.com/ Software Link:...