chakra: Crash in Js::JavascriptArray::GetNextIndex

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5154384812965888 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdd5d452000 Crash State: Js::JavascriptArray::GetNextIndex...

CVE-2018-1325: Improper Neutralization of Input During Web Page Generation

In Apache wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...

Joomla JS Jobs 1.2.0 Component - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com...

Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery

Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage:...

PT-2018-11717

Name of the Vulnerable Software and Affected Versions wicket-jquery-ui versions 6.29.0 and earlier wicket-jquery-ui versions 7.10.1 and earlier wicket-jquery-ui versions 8.0.0-M9.1 and earlier Description The issue allows JS code created in a WYSIWYG editor to be executed on display. This can lea...

Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery

Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com Software Link:...

CVE-2018-10107

D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php...

Design/Logic Flaw

D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php...

CVE-2018-10108: Improper Neutralization of Input During Web Page Generation

D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the Treturn parameter to /htdocs/webinc/js/bscsmsinbox.php...

Multiple Auth0 Library Cross-Site Request Forgery Vulnerabilities

Auth0.js is a client-side library for Auth0, and Lock is an embeddable login form for desktops, tablets, and mobile devices. A cross-site request forgery vulnerability exists in Auth0 Lock 10 and auth0.js 8, which can be exploited by a remote attacker constructing a malicious website to perform...

Joomla JS Jobs 1.2.0 Cross Site Scripting

Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link: https://www.joomsky.com/5/download/1.html...

Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting

Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link: https://www.joomsky.com/5/download/1.html...

Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting

Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html...

Joomla JS Jobs 1.2.0 Component - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link:...

CVE-2018-9183

The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS...

CVE-2018-9183

The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS...

CVE-2018-9183

The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS...

CVE-2018-9183

The vulnerability concerns the Joomla! Joom Sky JS Jobs Extension, specifically versions before 1.2.1. A Cross-Site Scripting (XSS) flaw exists due to missing validation on the URL field when creating a company entry, enabling injection of arbitrary script/HTML. Exploitation details or in‑the‑wil...

CVE-2018-9173

Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...

CVE-2018-9173

Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...