Reflective Cross-site Scripting Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A reflective cross-site scripting vulnerability exists in the UFIDA NC-IUFO Reporting System. The vulnerability allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading ...

Commercial pie ONex order management system reflective XSS

No description provided by source...

Microsoft Windows 7 SP1 - mrxdav.sys WebDav Privilege Escalation (MS16-016)

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Microsoft Windows 7 SP1 - 'mrxdav.sys' WebDAV Privilege Escalation (MS16-016) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'MS16-016 mrxdav.sys WebDav Local Privilege Escalation',...

Dolibarr CRM Cross Site Scripting

Exploit Title: Dolibarr CRM alert Search criteria ' alert ' into fields Third party name, Alias name, Custom…...

Vicidial 2.11 Cross Site Scripting

Exploit Title: Vicidial 2.11 - Reflective XSS Date: 0 day Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link: https://sourceforge.net/projects/astguiclient/files/astguiclient2.11rc1.zip/download Platorm: PHP Vicidial i...

Cisco EPC 3928 - Multiple Vulnerabilities

Cisco EPC 3928 - Multiple Vulnerabilities Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 / CVE-2016-1337...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

AVAST (Shop) #18 - Multiple Client Side XSS Vulnerabilities

Document Title: =============== AVAST Shop 18 - Multiple Client Side XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1635 Release Date: ============= 2016-05-25 Vulnerability Laboratory ID VL-ID: ====================================...

Reflective XSS Vulnerability in EasyCMS Enterprise Marketing Management System Administration Backend

EasyCMS is a web content management system based on PHP+Mysql architecture. A reflective XSS vulnerability exists in the administration backend of the EasyCMS enterprise marketing management system, which can be exploited by an attacker to submit data with js code on the personal information page...

PivotX cross-site scripting vulnerability (CNVD-2016-03594)

Pivotx is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A reflective cross-site scripting vulnerability exists in PivotX 2.3.11. An attacker can inject JavaScript code or bypass CSRF protection...

PT-2016-4163 · Ibm +2 · Ibm Sdk +3

Name of the Vulnerable Software and Affected Versions: IBM SDK, Java Technology Edition versions 6.0.0 through 6.0.16.24 IBM SDK, Java Technology Edition 6 R1 versions 6.1.0 through 6.1.8.24 IBM SDK, Java Technology Edition 7 versions 7.0.0 through 7.0.9.39 IBM SDK, Java Technology Edition 7 R1...

Run Binaries From Memory: Pazuzu

Pazuzu is a Python script that allows you to embed a binary within a precompiled DLL which uses reflective DLL injection. The goal is that you can run your own binary directly from memory. This can be useful in various scenarios. For example, if you want to exploit a vulnerability and run your ow...

TOTVS RM PORTAL Cross Site Scripting

TOTVS RM PORTAL Educational - Multiple Cross Site Scripting Vulnerabilities Product web page: www.totvs.com.br Author: vesp3r Email: [email protected] Published: 13/02/2016 Vendor Product Description TOTVS pronounced Totus is a Brazilian software company, with headquarters in Sao Paulo. TOTVS w...

Viprinet Multichannel VPN Router 300 Cross Site Scripting

Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300 CVE: CVE-2014-2045 Vendor: Viprinet Product: Multichannel VPN Router 300 Affected version: 2013070830/2013080900 Fixed version: 2014013131/2014020702 Reported by: Tim Brown Details: The data...

Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting

Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300 CVE: CVE-2014-2045 Vendor: Viprinet Product: Multichannel VPN Router 300 Affected version: 2013070830/2013080900 Fixed version: 2014013131/2014020702 Reported by: Tim Brown Details: The data...

Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting

Exploit for hardware platform in category web applications Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300 CVE: CVE-2014-2045 Vendor: Viprinet Product: Multichannel VPN Router 300 Affected version: 2013070830/2013080900 Fixed version:...

jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177)

Two cross-site scripting XSS flaws were found in Jenkins. A remote attacker could use these flaws to conduct XSS attacks against users of an application using Jenkins...

jspxcms admin backend login page cross-site scripting vulnerability

jspxcms is an open source, Java-based content management system CMS. A cross-site scripting vulnerability exists in the administration backend login page of jspxcms version v5.2.4, due to analyzing the search box on the front page of Jspxcms for user inputs that are not input filtered. This...

Informatica: [now.informatica.com] Reflective XSS

XSS vulnerability lies on http://now.informatica.com/launch-next-bigdata-registration-inxpo.html?Source=homepage POC Sign up for big data management Virtual launch event on parameter companyname inject '"...