KLA11255 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in LDSS dissector can be exploited remotely via malformed packet trace file to...

q-i.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-611701 Description| Value ---|--- Affected Website:| q-i.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

q-park.no XSS vulnerability

Open Bug Bounty ID: OBB-611007 Description| Value ---|--- Affected Website:| q-park.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

guide-israel.ru XSS vulnerability

Open Bug Bounty ID: OBB-603933 Description| Value ---|--- Affected Website:| guide-israel.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

q-lympics.de XSS vulnerability

Open Bug Bounty ID: OBB-595889 Description| Value ---|--- Affected Website:| q-lympics.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ask2 Q&A system front user.php file exists arbitrary user password change vulnerability

ask2 Q&A is an open source PHP Q&A program. There is an arbitrary user password change vulnerability in the ask2 Q&A System frontend user.php file. An attacker can exploit the vulnerability to directly modify the password of the administrator user...

q-park.nl XSS vulnerability

Open Bug Bounty ID: OBB-571414 Description| Value ---|--- Affected Website:| q-park.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Grab: [growth.grab.com] Reflected XSS via Base64-encoded "q" param on "my.html" Valentine's microsite

Hi, An encoded injection in the q parameter on my.html can be used to reflect JavaScript in the growth.grab.com context. This microsite creates a "Grab's Valentine" card for a driver over the past year, and carries its data in Base64 format. Proof of concept Please visit the following URL, scroll...

Human Factor Podcast: Jenny Radcliffe and Chris Boyd

A little while ago, I was invited to take part in Jenny Radcliffe's Human Factor Podcast. With 44 episodes strong and counting!, Jenny spends an hour or so talking at length with her guests who are professional investigators, security advocates, all-round educators, tireless consultant/conference...

q-ry.nl XSS vulnerability

Open Bug Bounty ID: OBB-567754 Description| Value ---|--- Affected Website:| q-ry.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

singapore.job-q.com XSS vulnerability

Open Bug Bounty ID: OBB-547918 Description| Value ---|--- Affected Website:| singapore.job-q.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5977: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&pricetype=range&price= request...

PHP Scripts Mall Single Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Single Theater Booking Script is a PHP and MySQL based online theater booking system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Single Theater Booking Script version 3.2.1. A remote attacker can exploit this vulnerability by sending...

CVE-2017-17617

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17632: Improper Neutralization of Special Elements used in an SQL Command

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17634: Improper Neutralization of Special Elements used in an SQL Command

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17431: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765...

Sql injection

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

CVE-2017-15373 : E-Sic 1.0 contains a SQL injection in the query parameter “q” of esiclivre/restrito/inc/lkpcep.php (the search private area). The root cause is improper handling of input leading to arbitrary SQL execution. Impact is described as partial to high confidentiality, integrity, and av...