4131 matches found
horizonutilities.com XSS vulnerability
Vulnerable URL: https://www.horizonutilities.com/pages/default.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 16.10.2017 Latest check for patch:| 16.10.2017 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...
October CMS Upload Protection Bypass Code Execution
This module exploits an Authenticated user with permission to upload and manage media contents can upload various files on the server. Application prevents the user from uploading PHP code by checking the file extension. It uses black-list based approach, as seen in...
October CMS 1.0.412 - Multiple Vulnerabilities
October CMS 1.0.412 - Multiple Vulnerabilities October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user...
October CMS 1.0.412 - Multiple Vulnerabilities
October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...
October CMS 1.0.412 Code Execution / Shell Upload
October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...
PT-2017-17116 · Bittorrent +1 · Qbittorrent +1
Name of the Vulnerable Software and Affected Versions: qBittorrent versions prior to 3.3.11 qBittorrent versions prior to the version released in October 2024 Description: The issue concerns a lack of proper escaping of values in the WebUI, potentially leading to XSS attacks. Additionally, there...
MS11-082: Description of the security update for Microsoft Host Integration Server 2009: October 11, 2011
MS11-082: Description of the security update for Microsoft Host Integration Server 2009: October 11, 2011 INTRODUCTION Microsoft has released security bulletin MS11-082. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
MS13-082: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 8, 2013
MS13-082: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 8, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...
MS11-082: Description of the security update for Microsoft Host Integration Server 2010: October 11, 2011
MS11-082: Description of the security update for Microsoft Host Integration Server 2010: October 11, 2011 INTRODUCTION Microsoft has released security bulletin MS11-082. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
MS10-072: Description of the security update for Microsoft SharePoint Foundation 2010: October 12, 2010
MS10-072: Description of the security update for Microsoft SharePoint Foundation 2010: October 12, 2010 INTRODUCTION Microsoft has released security bulletin MS10-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS...
mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB...
CVE-2016-7855
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016...
UBUNTU-CVE-2016-7855
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016...
CVE-2016-7855
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016. Recent assessments: Assessed Attacker Value: 0 Assessed...
docendi.com XSS vulnerability
Vulnerable URL: http://www.docendi.com/formations?utf8=%E2%9C%93%5Bq%5D=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
megabet.com XSS vulnerability
Vulnerable URL: http://www.megabet.com/OfferRedirect?url=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6257913 VIP website status:| No Check megabet.com SSL connection:| Grade: F...
CVE-2016-7384
creationtimestamp| type| source ---|---|--- 2016-10-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40655...