11714 matches found
Microsoft Windows: Turn off Registration (URL connection refers to Microsoft.com)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnoregistration.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Registration if URL connection is referring to Microsoft.com Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Salesforce RegistrationForm - Persistent Web Vulnerability
Document Title: =============== Salesforce RegistrationForm - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2054 Salesforce Security ID: 219513 Release Date: ============= 2018-06-22 Vulnerability Laboratory ID VL-ID:...
Design/Logic Flaw
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems...
After Upgrade to WEM 4.6 agents not getting configurations with error: Agent (Agent name) is not bound to any configuration set
Upgrade WEM environment from 4.5 to 4.6. After upgrading, WEM agents are randomly reported with the following different status under Administration Agents Registrations: "Agent is bound to multiple configuration sets." Then the same agents are reported with the following status: "Agent is not be...
Salesforce RegistrationForm - Persistent Web Vulnerability
Document Title: =============== Salesforce RegistrationForm - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2054 Salesforce Security ID: 219513 Release Date: ============= 2018-06-21 Vulnerability Laboratory ID VL-ID:...
VDA does not register when provisioned using PVS
The Citrix Virtual Delivery Agent does not register with the Citrix XenDesktop Deliver controller when streamed by Citrix Provisioning Services...
Crestron Device Detection (CTP)
Crestron Terminal Protocol CTP based detection of Crestron devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mail.ru: SQL injection on jd.mail.ru
SQL injection via POST parameter in user registration at jd.mail.ru. die ███████████████████████████ ███████▀▀▀░░░░░░░▀▀▀███████ ████▀░░░░░░░░░░░░░░░░░▀████ ███│░░░░░░░░░░░░░░░░░░░│███ ██▌│░░░░░░░░░░░░░░░░░░░│▐██ ██░└┐░░░░░░░░░░░░░░░░░┌┘░██ ██░░└┐░░░░░░░░░░░░░░░┌┘░░██ ██░░┌┘▄▄▄▄▄░░░░░▄▄▄▄▄└┐░░██...
cellphonerecon.com XSS vulnerability
Open Bug Bounty ID: OBB-629610 Description| Value ---|--- Affected Website:| cellphonerecon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Auth0 Glitch Allows Attackers to Launch Phishing Attacks
UPDATE Researchers are warning of a glitch in the Auth0 identity-as-a-service offering, which could allow bad actors to spoof a legitimate website and collect sensitive information from visitors. Researchers at Imperva on Tuesday found that the subdomain names of Auth0 are susceptible to security...
Liberapay: REGISTRATION USING FAKE EMAIL ACCOUNT
Go to page https://liberapay.com/sign-up 2. Input email address I tried to register with some email address [email protected] [email protected] [email protected] [email protected] [email protected] 3. Select the currency you want to use 4. click "GO" button 5. Will automatically enter into account without going through the process of verification email...
10-Strike Network Inventory Explorer 8.54 - Registration Key Buffer Overflow (SEH)
10-Strike Network Inventory Explorer 8.54 - Registration Key Buffer Overflow SEH...
U.S. Dept Of Defense: LDAP Injection at ██████
Summary: An LDAP Injection has been found at the mentioned domain Description: While performing a user registration, is it possible to edit the request and inject invalid characters, resulting in a LDAP injection Step-by-step Reproduction Instructions 1. Visit page...
foilChat Sign Up Email PIN Confirmation Bypass
foilChat sign up email PIN confirmation bypass ============================================== https://sintonen.fi/advisories/foilchat-signup-email-pin-confirmation-bypass.txt Overview -------- foilChat https://www.foilchat.com/ allows anyone to register with any email address due to a...
Arbitrary User Registration Vulnerability in Small Objects App
Small Object APP is a dating software based on mobile internet and big data matching. There is an arbitrary user registration vulnerability in Small Object APP. Attackers can register any account by grabbing packets and blasting the verification code...
CVE-2018-11473
Monstra CMS 3.0.4 has XSS in the registration Form i.e., the login parameter to users/registration...
CVE-2018-11473
Monstra CMS 3.0.4 has XSS in the registration Form i.e., the login parameter to users/registration...
Design/Logic Flaw
Monstra CMS 3.0.4 has XSS in the registration Form i.e., the login parameter to users/registration...
CVE-2018-11473
Monstra CMS 3.0.4 contains a Cross‑Site Scripting vulnerability in the user registration path (users/registration). The Nuclei template documents that an attacker can inject arbitrary JavaScript in the victim’s browser within the site’s context, potentially leading to cookie theft and session iss...
