Rash CMS 3.0 Cross Site Request Forgery

Exploit Title: Rash CMS CSRF Vulnerability Exploit Author: Hesam Bazvand Contact: [email protected] Software Link: http://www.rashcms.com/rashcms.zip Version: 3.0 Tested on: Windows 10 / Kali Linux Category: WebApps Exploit :...

Microsoft Windows: Maximum machine account password age

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainmaxmaschineaccpasswdage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Maximum machine account password age Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Digitally encrypt or sign secure channel data (always)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainrequiresignseal.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Digitally encrypt or sign secure channel data always Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows: Require strong session key

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windomainrequirestrongsessionkey.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Domain member: Require strong session key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Interactive logon: Machine account lockout threshold

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineacclockoutthreshold.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine account lockout threshold Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-10861)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in 'Account Management-Member Center-Chinese Information-Ordinary Member' in WUZHI CMS version 4.1.0. A remote attacker...

Cross site scripting

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

CVE-2018-11549

CVE-2018-11549 describes a stored XSS in WUZHI CMS 4.1.0, exploitable via the “Account Settings → Member Centre → Chinese information → Ordinary member” form using the QQ number field (form[qq_10]). The underlying cause is injecting script/HTML through that field’s input. Documented impact is a c...

CVE-2018-11549

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

PT-2018-10656 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A Stored XSS issue was found in the "Account Settings - Member Centre - Chinese information - Ordinary member" section, specifically via a QQ number. This can be exploited through a form submission, where...

CVE-2018-11549: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

SS-2018-010: Member disclosure in login form

More info at https://www.silverstripe.org/download/security-releases/ss-2018-010/...

perfumenani12.com XSS vulnerability

Open Bug Bounty ID: OBB-620194 Description| Value ---|--- Affected Website:| perfumenani12.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brantfordclub.ca XSS vulnerability

Open Bug Bounty ID: OBB-618687 Description| Value ---|--- Affected Website:| brantfordclub.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Ultimate Member Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Ultimate Member is one of the plug-ins used to create a membership site or online community. A cross-site scripting...

WordPress Ultimate Member Access Restriction Bypass Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Ultimate Member is one of the plug-ins used to create a membership site or online community. A security vulnerability exists...

WordPress Ultimate Member Plugin Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Ultimate Member is one of the plug-ins used to create a membership site or online community. An arbitrary file upload...

WordPress Ultimate Member Plugin Path Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Ultimate Member is one of the plug-ins used to create a membership site or online community. A directory traversal...

WordPress Ultimate Member plugin path traversal vulnerability (CNVD-2018-09595)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Ultimate Member is one of the plug-ins used to create a membership site or online community. A directory traversal...

WordPress Ultimate Member Plugin Access Restriction Bypass Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Ultimate Member is one of the plug-ins used to create a membership site or online community. A security vulnerability exis...