117 matches found
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27559
Monica 2.19.1 is affected by a stored XSS on the Contacts page via the Nickname field. The vulnerability is triggered when untrusted input is stored and later rendered in the page, potentially allowing script execution in the victim’s browser. The connected documents confirm the existence of this...
CVE-2021-27369
The vulnerability is in Monica (open-source personal relationship management system) specifically version 2.19.1. A stored XSS flaw exists on the Contact page that can be triggered via the Middle Name field. Root cause is not detailed in the provided documents beyond the store-based script inject...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct cross-site scripting attacks via the Middle Name field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Description field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Last Name field...
aulavirtual.escuelamonicagomez.com Cross Site Scripting vulnerability OBB-1383273
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ex-US Intelligence Agent Charged With Spying and Helping Iranian Hackers
The United States Department of Justice has announced espionage charges against a former US Air Force intelligence officer with the highest level of top-secret clearance for providing the Iranian government classified defense information after she defected to Iran in 2013. Monica Elfriede Witt ,...
US Air Force Defector Allegedly Helped Iran Hack Americans
In an astonishing indictment, the DOJ details how Monica Witt allegedly turned on her former counterintelligence colleagues...
Wallarm to Sponsor AppSec Cali
If you are a SecOps or DevOps professional on the west coast you can not miss the premier California application security event: AppSec California, January 22–25th in Santa Monica. Here are testimonials from the previous AppSec Cali events: “I'm looking forward to AppSecCali next week. Last year...
volkswagensantamonica.com XSS vulnerability
Open Bug Bounty ID: OBB-576350 Description| Value ---|--- Affected Website:| volkswagensantamonica.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
volkswagensantamonica.com XSS vulnerability
Open Bug Bounty ID: OBB-385452 Description| Value ---|--- Affected Website:| volkswagensantamonica.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...
monicavinader.com XSS vulnerability
Vulnerable URL: http://www.monicavinader.com/baja-mens-large-bracelet/baja-mens-large-bracelet-black-onyx?search=d'" /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...
WinAMP 5.551 MAKI Parsing Integer Overflow
/ Winamp 5.551 MAKI Parsing Integer Overflow Exploit !!! Tested on :Vista sp1 and Xpsp3 Release Date :May 22 2009 Venders web site :http://www.winamp.com/ Version Tested:Winamp 5.551 Not vulnerable :Winamp 5.552 Credits to Monica Sojeong Hong down at vrt-sourcefire for the overflow...