Bitcoin MLM Software 1.0.2 - Cross-Site Scripting Vulneravility

Exploit for php platform in category web applications Exploit Title: Bitcoin MLM Software 1.0.2 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/bitcoin-mlm/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

PHP Scripts Mall Doctor Search Script 1.0.2 Cross Site Scripting

Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/doctor-search-script/...

earthproperties.com XSS vulnerability

Open Bug Bounty ID: OBB-543650 Description| Value ---|--- Affected Website:| earthproperties.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

visiononmorphett.com.au XSS vulnerability

Open Bug Bounty ID: OBB-533861 Description| Value ---|--- Affected Website:| visiononmorphett.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cutestimator.com XSS vulnerability

Open Bug Bounty ID: OBB-533703 Description| Value ---|--- Affected Website:| cutestimator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4activeladies.dk XSS vulnerability

Open Bug Bounty ID: OBB-528284 Description| Value ---|--- Affected Website:| 4activeladies.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

pozvonok.ru XSS vulnerability

Open Bug Bounty ID: OBB-472563 Description| Value ---|--- Affected Website:| pozvonok.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Auth0 auth0.js cross-origin vulnerability

Auth0.js is the client library for Auth0. A cross-origin vulnerability exists in Auth0 auth0.js prior to 8.12. An attacker could use this vulnerability to obtain an authenticated user's token and invoke a service on behalf of the user if the target site or application uses a popup callback page v...

The vulnerability of the psnotifyd application, a printing software for Pharos PopUp, allows a intruder to execute arbitrary code.

The vulnerability of the psnotifyd application for Pharos PopUp printing is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the psnotifyd application, a printing software for Pharos PopUp, allows a intruder to execute arbitrary code.

The vulnerability of the psnotifyd application for Pharos PopUp printing is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

CVE-2017-17068

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...

CVE-2017-17068

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...

Bitwarden: Export vault feature is vulnerable to CSV injection

Hello guys I don't know if you care about this issue but it seems that the export feature in your https://vault.bitwarden.com//tools is vulnerable to CSV injection. If a CSV contains a malicious command it may have big impact Even though there is a popup notification for users before opening the...

Pharos PopUp Printer Client DecodeBinary Code Execution Vulnerability(CVE-2017-2788)

Summary An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always...

Pharos PopUp Printer Client memcpy Code Execution Vulnerability(CVE-2017-2787)

Summary A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening...

Pharos PopUp Printer Client DecodeString Code Execution Vulnerability(CVE-2017-2785)

Summary An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always...

NiuShop open source mall system \application\shop\controller\goods.php file reflective cross-site scripting vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NiuShop open source mall system \application\shop\controller\goods.php file there is a reflective cross-site...

Reflected Cross-Site Scripting Vulnerability in YiDaCMS Yidacms.html.asp Page

YidaCMS website management system is a simple, practical and efficient website builder. A reflective cross-site scripting vulnerability exists in the YiDaCMS Yidacms.html.asp page. An attacker can construct an XSS statement and perform a pop-up box operation to obtain user cookies and other...

Cross-site Scripting Vulnerability in Qibo CMS Frontend

Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. A cross-site scripting vulnerability exists in the front-end of Qibo CMS, where an attacker can construct...

Reflected Cross-Site Scripting Vulnerability in S-CMS V3.0 build20170808 /admin/demo.asp Page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in the /admin/demo.asp page in S-CMS V3.0 build20170808. This vulnerability allows an attacker to construct XSS statements and perform pop-up box...