Input validation

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

CVE-2017-17159: Improper Input Validation

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

agroit.li.fri.uni-lj.si XSS vulnerability

Open Bug Bounty ID: OBB-453939 Description| Value ---|--- Affected Website:| agroit.li.fri.uni-lj.si Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

alyasabr.com XSS vulnerability

Open Bug Bounty ID: OBB-347712 Description| Value ---|--- Affected Website:| alyasabr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

casamayor-realestate.com XSS vulnerability

Vulnerable URL: http://www.casamayor-realestate.com/si/index.php?seccion="'--!...

si-tech.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-273239 Description| Value ---|--- Affected Website:| si-tech.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blog.bosch-si.com XSS vulnerability

Vulnerable URL: http://blog.bosch-si.com/categories?s=xss%3Cscript%3Ealert%27OPENBUGBOUNTY%27;%3C/script%3E& Details: Description| Value ---|--- Patched:| Yes, at 13.02.2017 Latest check for patch:| 13.02.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

sos112.si XSS vulnerability

Vulnerable URL: http://www.sos112.si/slo/iskanje.php?searchsource=0=test=10=urszr=long=all=wrd%22%3E%3Cimg%20src=null%20onerror=prompt/OPENBUGBOUNTY/%3E==&cmd.x;=0&cmd.y;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

si-tech.co.jp XSS vulnerability

Vulnerable URL: http://www.si-tech.co.jp/preview/search.php?key=="=vendor=device=ASC Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2569376 VIP website status:| No Check...

acord-92.si XSS vulnerability

Vulnerable URL: http://www.acord-92.si/iskalnik/?isci=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

SI Book Tracker - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SI Book Tracker published at the 'play' market has multiple vulnerabilities...

Wordpress SI CAPTCHA AntiSpam 插件-test/index.php-跨站脚本漏洞

No description provided by source...

Multiple vulnerabilities in DrayTek VigorACS SI

DrayTek VigorACS SI = 1.3.0 Vigor ACS-SI Edition is a Central Management System for DrayTek routers and firewalls, providing System Integrators or system administration personnel a real-time integrated monitoring, configuration and management platform...

Draytek Vigor ACS-SI multiple security vulnerabilities

Default account, unauthorized access, directory traversal...

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities

No description provided by source. DrayTek VigorACS SI = 1.3.0 Vigor ACS-SI Edition is a Central Management System for DrayTek routers and firewalls, providing System Integrators or system administration personnel a real-time integrated monitoring, configuration and management platform...

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This is not so much a software vulnerability but more a configuration issue. 2.2 Unauthenticated...

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities

DrayTek VigorACS SI versions 1.3.0 and below suffer from local file inclusion, remote file upload, file write, and default login vulnerabilities. DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This...

DrayTek VigorACS SI 1.3.0 File Write / LFI / File Upload

DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This is not so much a software vulnerability but more a configuration issue. 2.2 Unauthenticated arbitrary file read/write functionality via...

CVE-2014-5190

Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...