1412 matches found
CVE-2020-20508: Improper Neutralization of Input During Web Page Generation
Shopkit v2.7 contains a reflective cross-site scripting XSS vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field...
Trial Ends in Guilty Verdict for DDoS-for-Hire Boss
A jury in California today reached a guilty verdict in the trial of Matthew Gatrel, a St. Charles, Ill. man charged in 2018 with operating two online services that allowed paying customers to launch powerful distributed denial-of-service DDoS attacks against Internet users and websites. Gatrels...
NetIQ Access Manager Cross-Site Scripting Vulnerability
NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are using a cell phone or laptop to access on-premise or cloud-based services, Access Manager is secure and provides a single sign-on experience.NetIQ Access Manager versio...
JEESNS Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74052)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the system error message text field...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module. Connected documents confirm the issue across multiple databases, but do not provide concrete exploit details, affected versions beyond the stated 1.0, or a...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
PT-2021-10480
Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a reflective cross-site scripting XSS vulnerability. This vulnerability is located in the keyword search function under the background articles module. Recommendations: For WTCMS version...
CVE-2020-20345: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20344: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps
Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service DDoS attack recorded to date. The attack, launched via a Mirai botnet, is said to have targeted an unnamed customer in the financial industr...
Exploit for Cross-site Scripting in Tastyigniter
CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant...
Adobe Connect Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74112)
Adobe Connect, an online video conferencing software, is vulnerable to a reflective cross-site scripting vulnerability in Adobe Connect 11.2.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
Adobe Connect 跨站脚本漏洞
Adobe Connect, an online video conferencing software, is vulnerable to a reflective cross-site scripting vulnerability in Adobe Connect 11.2.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
PT-2021-14749
Name of the Vulnerable Software and Affected Versions ZTE ZXIPTV version 5.06.04.09 ZTE ZXIPTV-EAS version 5.06.04.09 Description The issue is related to two reflective cross-site scripting XSS vulnerabilities in ZTE's big video business platform. These vulnerabilities are caused by insufficient...
CVE-2021-21738: Improper Neutralization of Input During Web Page Generation
ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...