11341 matches found
[SECURITY] Fedora 24 Update: rkward-0.6.5-5.fc24
RKWard aims to provide an easily extensible, easy to use IDE/GUI for the R-project. RKWard tries to combine the power of the R-language with the relative ease of use of commercial statistics tools. Long term plans include integration with office suites...
MantisBT Source Integration Cross-Site Scripting Vulnerability
MantisBT is MantisBT team of a Web-based open source defect tracking system . The system provides project management and defect tracking services in the form of Web operations . Source Integration is one of the source code control integration plug-in . A cross-site scripting vulnerability exists ...
Distributed Security Alerting: Securitybot
Distributed Security Alerting Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber’s blog post . Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster and more...
Joomla JooCart 2.x SQL Injection
Exploit Title: Joomla! Component JooCart Joomla OpenCart Integration v2.x - SQL Injection Google Dork: N/A Date: 20.03.2017 Vendor Homepage: http://soft-php.com Software: https://www.opencart.com/index.php?route=marketplace/extension/info&extensionid=4478 Demo: http://demo.soft-php.com Version: 2...
Joomla! Component JooCart 2.x - product_id SQL Injection
Joomla! Component JooCart 2.x - productid SQL Injection Exploit Title: Joomla! Component JooCart Joomla OpenCart Integration v2.x - SQL Injection Google Dork: N/A Date: 20.03.2017 Vendor Homepage: http://soft-php.com Software:...
Joomla! Component JooCart 2.x - 'product_id' SQL Injection
Exploit Title: Joomla! Component JooCart Joomla OpenCart Integration v2.x - SQL Injection Google Dork: N/A Date: 20.03.2017 Vendor Homepage: http://soft-php.com Software: https://www.opencart.com/index.php?route=marketplace/extension/info&extensionid=4478 Demo: http://demo.soft-php.com Version: 2...
Joomla JooCart 2.x Component - product_id Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component JooCart Joomla OpenCart Integration v2.x - SQL Injection Google Dork: N/A Date: 20.03.2017 Vendor Homepage: http://soft-php.com Software:...
Cross site scripting
An XSS vulnerability in the MantisBT Source Integration Plugin before 2.0.2 search result page allows an attacker to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by crafting any valid parameter...
CVE-2017-6958
An XSS vulnerability in the MantisBT Source Integration Plugin before 2.0.2 search result page allows an attacker to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by crafting any valid parameter...
CVE-2017-6958
An XSS vulnerability in the MantisBT Source Integration Plugin before 2.0.2 search result page allows an attacker to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by crafting any valid parameter...
CVE-2017-6958
The CVE-2017-6958 entry describes an XSS vulnerability in the MantisBT Source Integration Plugin (pre-2.0.2). The flaw allows an attacker to inject arbitrary HTML/JavaScript via crafted parameters on the plugin’s search results page, potentially exploiting CSP allowances in MantisBT. Affected com...
CVE-2017-6958
An XSS vulnerability in the MantisBT Source Integration Plugin before 2.0.2 search result page allows an attacker to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by crafting any valid parameter...
Steam Profile Integration 2.0.11 SQL Injection
Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection Google Dork: inurl:tab=nodesteamsteamprofile Date: 13/03/2017 Exploit Author: DrWhat Vendor Homepage: https://invisionpower.com/files/file/8170-steam-profile-integration/ Software Link:...
Protecting Your Web Apps with AppSpider Defend Until They Can Be Patched
AppSpider scans can detect exploitable vulnerabilities in your applications, but once these vulnerabilities are detected how long does it take your development teams to create code fixes for them? In some cases it could take several days to weeks before a fix/patch to resolve the vulnerability ca...
IBM Integration Bus XXE Vulnerability (290615)
IBM Integration Bus is prone to an XML External Entity XXE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Steam Profile Integration 2.0.11 - SQL injection
Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection Google Dork: inurl:tab=nodesteamsteamprofile Date: 13/03/2017 Exploit Author: DrWhat Vendor Homepage: https://invisionpower.com/files/file/8170-steam-profile-integration/ Software Link:...
HackerOne: IE 11 Self-XSS on Jira Integration Preview Base Link
I wasn't sure if you would accept this report due to it being Self-XSS, but I figured it might be useful information because it breaks one of the flows used to validate URLs. Steps ==================== 1. Launch IE 11 2. Log into a HackerOne account that has admin on a program. 3. Go to the...
IBM Integration Bus 8.x < 8.0.0.8 / 9.x < 9.0.0.6 / 10.x < 10.0.0.5 SOAP FLOWS XXE DoS
The version of IBM Integration Bus formerly known as IBM WebSphere Message Broker is 8.x prior to 8.0.0.8, 9.x prior to 9.0.0.6, or 10.x prior to 10.0.0.5. It is, therefore, affected by a denial of service vulnerability due to an XML external entity XXE injection error in SOAP FLOWS when processi...
IBM Integration Bus 8.x < 8.0.0.8 / 9.x < 9.0.0.7 / 10.x < 10.0.0.7 Clickjacking
The version of IBM Integration Bus formerly known as IBM WebSphere Message Broker is 8.x prior to 8.0.0.8, 9.x prior to 9.0.0.7, or 10.x prior to 10.0.0.7. It is, therefore, affected by a clickjacking vulnerability in the administrative web UI due to a failure to set the X-Frame-Options header in...