1276 matches found
Privilege Escalation
hibernate-validator is vulnerable to privilege escalation attacks. When the security manager is used, its reflective permissions allow the access to private members...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
Windows Meterpreter (Reflective Injection x64), Windows x64 Reverse Named Pipe (SMB) Stager
Inject the meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Connect back to the attacker via a named pipe pivot This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
OURPHP front reflective XSS
No description provided by source...
Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 /admin/up.asp Page
ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the ZYCHCMS V06 /admin/up.asp page. An attacker can construct an XSS statement to operate a pop-up box and obtain sensitive information such as a user's cookie...
Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 /Include/map.asp Page
ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the ZYCHCMS V06 /Include/map.asp page. The vulnerability allows an attacker to construct an XSS statement and perform pop-up box operations to obtain sensitive information such as user...
Cross site scripting
Multiple Reflective cross-site scripting XSS vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter...
CVE-2017-11685
Multiple Reflective cross-site scripting XSS vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter...
CVE-2017-11685
Multiple Reflective cross-site scripting XSS vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter...
CVE-2017-11685
Affected product: Zoho ManageEngine Event Log Analyzer (versions 11.4 and 11.5). Vulnerability type / vector: Cross-site scripting (XSS) in the search and display of event data, exploitable via the fName parameter. Root cause (as stated): Multiple reflective XSS vulnerabilities enable remote atta...
FineCMS reflective xss
No description provided by source...
Multiple XSS Vulnerabilities in PHPSHE B2C Mall System v1.5
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. Multiple XSS vulnerabilities exist in PHPSHE B2C Mall System v1.5. An attacker can exploit this vulnerability to obtain information such as login cookies of administrative...
CVE-2017-6605
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a reflective cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvc8541...
Cross-site scripting vulnerability in the username parameter of the login.jsp file of the Air English Classroom Campus Education Cloud Platform
The Air English Classroom Campus Education Cloud Platform is a digital English online teaching system. A reflective cross-site scripting vulnerability exists in the username parameter of the login.jsp file of the Air English Classroom Campus Education Cloud Platform, due to the system's failure t...
Reflective Cross-site Scripting Vulnerability in Five Fingers CMS System
Five Fingers CMS is an open source content management system suitable for portals, corporate website builders, mobile websites and microblogging promotion. Five Fingers CMS system version v4.0.0 reflective cross-site scripting vulnerability, attackers by inserting XSS malicious code to perform...
CVE-2017-8514
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...
Information disclosure
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...
Windows Escalate UAC Protection Bypass (In Memory Injection) abusing WinSXS
This module will bypass Windows UAC by utilizing the trusted publisher certificate through process injection. It will spawn a second shell that has the UAC flag turned off by abusing the way "WinSxS" works in Windows systems. This module uses the Reflective DLL Injection technique to drop only th...