Page Compare Reflected Cross-site Scripting (XSS) vulnerability

Impact ACS Commons version 5.1.x and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User input submitted via these parameters is not validated or sanitized. An attacker must provide a...

Weak password vulnerability in Lantern Fruit routers

Shenzhen Zhizhi High-tech Development Co., Ltd. was founded in September 2013, is a high-tech enterprise with independent intellectual property rights, specializing in research and development, production and sales of intelligent home. Lantern Fruit router has a weak password vulnerability,...

lantern-books.com Improper Access Control vulnerability OBB-1221230

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2016-10806

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10806

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

Design/Logic Flaw

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10806

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10806

CVE-2016-10806 affects cPanel prior to 57.9999.54 and enables self XSS on the Paper Lantern Landing Page (SEC-110). The available documents consistently describe the issue as a self XSS vulnerability, with no explicit exploit details or additional impact described beyond what is stated. No remedi...

PT-2019-7602

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows self XSS on the Paper Lantern Landing Page. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...

CVE-2016-10806: Improper Neutralization of Input During Web Page Generation

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2017-18471

cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...

PT-2019-8406

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue allows self XSS on the paper lantern password-change screen. Recommendations For versions prior to 62.0.4, update to version 62.0.4 or later to resolve the issue...

lantern-spb.ru XSS vulnerability

Open Bug Bounty ID: OBB-389018 Description| Value ---|--- Affected Website:| lantern-spb.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

lantern.com XSS vulnerability

Vulnerable URL: http://www.lantern.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 13:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1833108 Goog...

lantern-spb.ru XSS vulnerability

Vulnerable URL: http://www.lantern-spb.ru/catalog-search/?search='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8621590 Google Pagerank| 0 VIP website status:| No Check...

How to Run Linux Kernel on Canon DSLRs Cameras

Last month, I Got a Canon's amazing and powerful video-capable DSLR Camera and was wondering if I could play a hack on it. Yes, Just like last time I installed and run Linux on my PlayStation 3 gaming console and the popular game console, the Nintendo Wii. What If I could port Linux Kernel to my...

XMB Forum 1.6 pre-beta Image Tag Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and /img tags in a...

Lantern CMS Cross Site Scripting

================================== Vulnerability ID: HTB22621 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinlanterncms1.html Product: Lantern CMS Vendor: Lantern http://www.lanterncms.com/www/html/7-home-page.asp Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions...

XSS vulnerability in Lantern CMS

Vulnerability ID: HTB22620 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinlanterncms.html Product: Lantern CMS Vendor: Lantern http://www.lanterncms.com/www/html/7-home-page.asp Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 22 September...

XSS vulnerability in Lantern CMS

Vulnerability ID: HTB22621 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinlanterncms1.html Product: Lantern CMS Vendor: Lantern http://www.lanterncms.com/www/html/7-home-page.asp Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 22 September...