Alibaba Clone Script 1.0.2 Cross Site Scripting

Exploit Title: Alibaba Clone Script 1.0.2 a Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Version...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting

Alibaba Clone Script 1.0.2 - Cross-Site Scripting. CVE-2018-6867. Webapps exploit for PHP platform Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category...

Flash ActiveX 18.0.0.194 - Code Execution

Flash ActiveX 18.0.0.194 - Code Execution CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44742.swf...

Facebook Clone Script 1.0.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul...

Bitcoin MLM Software 1.0.2 - Cross-Site Scripting Vulneravility

Exploit for php platform in category web applications Exploit Title: Bitcoin MLM Software 1.0.2 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/bitcoin-mlm/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

PHP Scripts Mall Doctor Search Script 1.0.2 Cross Site Scripting

Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/doctor-search-script/...

earthproperties.com XSS vulnerability

Open Bug Bounty ID: OBB-543650 Description| Value ---|--- Affected Website:| earthproperties.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

visiononmorphett.com.au XSS vulnerability

Open Bug Bounty ID: OBB-533861 Description| Value ---|--- Affected Website:| visiononmorphett.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cutestimator.com XSS vulnerability

Open Bug Bounty ID: OBB-533703 Description| Value ---|--- Affected Website:| cutestimator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4activeladies.dk XSS vulnerability

Open Bug Bounty ID: OBB-528284 Description| Value ---|--- Affected Website:| 4activeladies.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

pozvonok.ru XSS vulnerability

Open Bug Bounty ID: OBB-472563 Description| Value ---|--- Affected Website:| pozvonok.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Auth0 auth0.js cross-origin vulnerability

Auth0.js is the client library for Auth0. A cross-origin vulnerability exists in Auth0 auth0.js prior to 8.12. An attacker could use this vulnerability to obtain an authenticated user's token and invoke a service on behalf of the user if the target site or application uses a popup callback page v...

The vulnerability of the psnotifyd application, a printing software for Pharos PopUp, allows a intruder to execute arbitrary code.

The vulnerability of the psnotifyd application for Pharos PopUp printing is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the psnotifyd application, a printing software for Pharos PopUp, allows a intruder to execute arbitrary code.

The vulnerability of the psnotifyd application for Pharos PopUp printing is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

CVE-2017-17068

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...

CVE-2017-17068

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...

Bitwarden: Export vault feature is vulnerable to CSV injection

Hello guys I don't know if you care about this issue but it seems that the export feature in your https://vault.bitwarden.com//tools is vulnerable to CSV injection. If a CSV contains a malicious command it may have big impact Even though there is a popup notification for users before opening the...

Pharos PopUp Printer Client memcpy Code Execution Vulnerability(CVE-2017-2787)

Summary A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening...

Pharos PopUp Printer Client DecodeBinary Code Execution Vulnerability(CVE-2017-2788)

Summary An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always...

Pharos PopUp Printer Client DecodeString Code Execution Vulnerability(CVE-2017-2785)

Summary An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always...