CVE-2016-5165

Cross-site scripting XSS vulnerability in the Developer Tools aka DevTools subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a...

Fortinet FortiAnalyzer and FortiManager 'Filenames' HTML Injection Vulnerability

Fortinet FortiManager is a centralized network security management solution; Fortinet FortiAnalyzer is a centralized network security reporting solution. An HTML injection vulnerability exists in FortiAnalyzer and FortiManager 'Filenames' that could be exploited by an attacker to steal cookie-bas...

OwnCloud Gallery Application HTML Injection Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. An HTML injection vulnerability exists in the OwnCloud Gallery Application, which could be exploited by an attacker to steal...

CVE-2015-5399

CVE-2015-5399 affects PHPVibe, a PHPCMS, where versions before 4.21 are vulnerable to a stored XSS in comments. The root cause is untrusted user input being accepted in comments and then rendered, allowing remote authenticated users to inject arbitrary script/HTML. Public references describe the ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...

OLX: XSS and HTML Injection https://sharjah.dubizzle.com/

Hi,Olx Firstly.I saw that dubizzle.com is in your scope so I've decided to report it. PoC: --------------------- 1-Go to that link 2-Login to your dubizzle account,XSS will execute...

Apache Ranger HTML Injection Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. Apache Ranger has an...

Karenderia Multiple Restaurant System 3.2 Cross Site Scripting

======================================================================== | Title : Karenderia Multiple Restaurant System 3.2 Xss/html inject vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v 3.2 | Vendor :...

CVE-2016-6319

Cross-site scripting XSS vulnerability in app/helpers/formhelper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

Cross site scripting

Cross-site scripting XSS vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3194

Cross-site scripting XSS vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WSO2 Carbon has multiple vulnerabilities

WSO2 Carbon is a core platform for developing WSO2 middleware products from WSO2, Inc. A local file inclusion vulnerability, an HTML injection vulnerability, a cross-site scripting vulnerability, and a cross-site request forgery vulnerability exist in WSO2 Carbon version 4.4.5. An attacker could...

Multiple vulnerabilities in WSO2 Carbon (CNVD-2016-06406)

WSO2 Carbon is a core platform for developing WSO2 middleware products from WSO2, Inc. A local file inclusion vulnerability, an HTML injection vulnerability, a cross-site scripting vulnerability, and a cross-site request forgery vulnerability exist in WSO2 Carbon version 4.4.5. An attacker could...

Multiple HTML Injection Vulnerabilities in Fortinet FortiVoice

The Fortinet FortiVoice phone system is designed to provide a simple, affordable and user-friendly package for handling intelligent calls. Multiple HTML injection vulnerabilities exist in Fortinet FortiVoice. Because the program fails to properly filter user-supplied input, an attacker could...

Multiple HTML Injection Vulnerabilities in Fortinet FortiCloud

Fortinet FortiCloud is a hosted security management and log retention service for the FortiGate product line. Multiple HTML injection vulnerabilities exist in Fortinet FortiCloud. Because the program fails to properly filter user input, an attacker could exploit the vulnerabilities to execute...

Red Hat Satellite HTML Injection Vulnerability

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. An HTML injection vulnerability exists in Red Hat Satellite version 6, whi...

Fortinet FortiManager and FortiAnalyzer HTML Injection Vulnerabilities

Fortinet FortiManager and Fortinet FortiAnalyzer are products of Fortinet, a centralized network security management solution; Fortinet FortiAnalyzer is a centralized network security reporting solution. Fortinet FortiManager is a centralized network security management solution; Fortinet...

HTTP CONNECT and 407 Proxy Authentication Required messages are not integrity protected

Overview HTTP CONNECT requests and 407 Proxy Authentication Required messages are not integrity protected and are susceptible to man-in-the-middle attacks. WebKit-based applications are additionally vulnerable to arbitrary HTML markup and JavaScript execution in the context of the originally...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...