Trend Micro Direct Pass -Persistent Web Vulnerability

Document Title: =============== Trend Micro Direct Pass -Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1712 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1712...

Barracuda Networks SN #52 - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks SN 52 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1297 BNSEC ID: 0004001004 Tracking ID: CAS-03491-K1X2V0 Release Date: ============= 2016-02-03 Vulnerability Laborator...

IBM InfoSphere Data Architect Cross-Site Scripting Vulnerability

IBM Rational Software Architect is a suite of software development platforms.Rational Software Architect for WebSphere Software is a suite of development platforms for designing, developing, and optimizing IBM WebSphere applications.InfoSphere Rational Software Architect for WebSphere Software is...

OpenCart Cross-Site Scripting Vulnerability

OpenCart is an open source e-commerce system. The OpenCart index.php script fails to adequately filter the 'zoneid' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...

IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2015-08136)

IBM WebSphere Portal is a suite of enterprise portal software from IBM in the United States. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

SAP NetWeaver AS JAVA - XSS vulnerability

Application: SAP NetWeaver Portal 7.4 Vendor URL: SAP Bug: XSS Reported: 12.08.2015 Vendor response: 13.08.2015 Date of Public Advisory: 14.06.2016 Reference: SAP Security Note 2256178 Author: Vahagn VardanyanERPScan VULNERABILITY INFORMATION Class: XSS Impact: modify displayed content from a Web...

Angler Exploit Kit Spreading Cryptowall 4.0

As expected, it didn’t take long for one of the most popular exploit kits, Angler, to start spreading the latest iteration of Cryptowall ransomware. A drive-by campaign that uses a one-two punch to drop Cryptowall 4.0 has been observed in the wild this week, according to researchers at Heimdal...

MediaWiki cross-site scripting vulnerability (CNVD-2015-07394)

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki suffers from a cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or...

Cisco SocialMiner WeChat Page Cross-Site Scripting Vulnerability

A vulnerability in the WeChat page of Cisco Social Miner could allow an unauthenticated, remote attacker to send a malicious script to an unsuspecting user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by convincing the user of the...

mounteqshop.be XSS vulnerability

Vulnerable URL: http://www.mounteqshop.be/site/error.php?url=http%3A%2F%2Fwww.mounteqshop.be%2Fnl%2Fadvancedsearch.htm%3Faction%3Dsearch%26%253Ciframestyle%3D%26pagnr%3D1%26ppp%3Dalles=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|---...

IBM OpenPages GRC Platform Cross-Site Scripting Vulnerability

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site scripting vulnerability exists in IBM OpenPages GRC Platform, which allows remote attackers to exploit the vulnerability to inject malicious scri...

Splunk Cross-Site Scripting Vulnerability (CNVD-2015-06361)

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. Splunk suffers from a cross-site scripting vulnerability that allows remote attackers to...

Apache Struts Cross-Site Scripting Vulnerability (CNVD-2015-06370)

Apache Struts is an open source framework for creating enterprise Java Web applications. Apache Struts debug mode suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2015-06294)

IBM Content Navigator is a Web client that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which allows remote attackers to exploit the vulnerability to inject maliciou...

KnowledgeTree 'login.php' Cross-Site Scripting Vulnerability

KnowledgeTree is a Web-based open source document management system . A cross-site scripting vulnerability exists in KnowledgeTree login.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Aruba Networks Mobility Controller Cross-Site Scripting Vulnerability

Aruba Networks Mobility Controller is a suite of solutions that provide mobile access for the enterprise. A cross-site scripting vulnerability in Aruba Networks Mobility Controller allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

JVN#41048401: Japan Connected-free Wi-Fi vulnerable to script injection

Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. is vulnerable to script injection when displaying malformed strings contained in SSID. Impact When the device running the app connects to an access point and its SSID contains malicious script, the script may be executed. Solutio...

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

Splunk Enterprise and Splunk Light Dashboard Cross-Site Scripting Vulnerability

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Dashboard for Splunk Enterprise and Splunk...