me-metropole-nantaise.org XSS vulnerability

Open Bug Bounty ID: OBB-455089 Description| Value ---|--- Affected Website:| me-metropole-nantaise.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dream-me-up.fr XSS vulnerability

Open Bug Bounty ID: OBB-451395 Description| Value ---|--- Affected Website:| dream-me-up.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

find-me-a-car.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-447597 Description| Value ---|--- Affected Website:| find-me-a-car.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

ju8.me XSS vulnerability

Open Bug Bounty ID: OBB-441168 Description| Value ---|--- Affected Website:| ju8.me Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Intel Active Management Technology Multiple Buffer Overflow Vulnerabilities (INTEL-SA-00086)

Intel Active Management Technology is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-5705

CVE-2017-5705 (and related CVEs) affects Intel Manageability Engine (ME) firmware: kernel-level buffer overflows in ME 11.x, SPS 4.0, and TXE 3.0 allow local attackers to execute arbitrary code. Siemens’ Update A details mitigations per affected devices and directs updating ME/SPS/TXE firmware to...

je-me-documente.com XSS vulnerability

Open Bug Bounty ID: OBB-427773 Description| Value ---|--- Affected Website:| je-me-documente.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

buro247.me XSS vulnerability

Open Bug Bounty ID: OBB-375966 Description| Value ---|--- Affected Website:| buro247.me Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Rate Me Cross-Site Scripting Vulnerability

Rate Me is a rating script written in PHP. A cross-site scripting vulnerability exists in the rate-me.php file in Rate Me version 1.0. A remote attacker can exploit this vulnerability to inject JavaScript code...

Design/Logic Flaw

rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...

CVE-2017-15384

rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...

CVE-2017-15384

rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...

CVE-2017-15384

Rate Me 1.0’s rate-me.php is vulnerable to cross-site scripting via the id parameter in a rate action. The provided documents confirm an XSS condition but do not specify affected versions beyond Rate Me 1.0, nor provide exploitation details, impact scope, or remediation guidance.

CVE-2017-15384

rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...

ju8.me XSS vulnerability

Vulnerable URL: http://ju8.me/?lang=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59501 VIP website status:| No Coordinated Disclosur...

Laravel Security Bypass Vulnerability

Laravel is a PHP development framework for developing web applications and provides syntax highlighting, documentation and extension packages. A security vulnerability exists in Laravel versions prior to 5.5.10 that stems from the program failing to properly handle the rememberme token validation...

CVE-2017-14775

Laravel before 5.5.10 mishandles the rememberme token verification process because DatabaseUserProvider does not have constant-time token comparison...

LOYTEC LVIS-3ME Cross-Site Scripting Vulnerability

LVIS-3ME is a graphical user interface from LOYTEC. A cross-site scripting vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to conduct a cross-site scripting attack due to a lack of proper web request authentication in the web interface, if an...

Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch

Researchers at Positive Technologies forced Intel’s hand at revealing that a previously undocumented kill switch exists for its oft-criticized Intel Management Engine, a remote management component of Intel CPUs. Initially, Positive Technologies set out to disable the feature that some security...

Hidden Kill Switch Identified in Controversial Intel ME controller chip

By Uzair Amir Europe’s leading cyber-security firm Positive Technologies’ security researchers have a This is a post from HackRead.com Read the original post: Hidden Kill Switch Identified in Controversial Intel ME controller chip...