11196 matches found
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
CVE-2018-1000062
WonderCMS version 2.4.0 contains a Stored Cross-Site Scripting on File Upload through SVG vulnerability in uploadFileAction, 'svg' = 'image/svg+xml' that can result in An attacker can execute arbitrary script on an unsuspecting user's browser. This attack appear to be exploitable via Crafted SVG...
drukwerkdeal.nl XSS vulnerability
Open Bug Bounty ID: OBB-555129 Description| Value ---|--- Affected Website:| drukwerkdeal.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...
visitcuba.com XSS vulnerability
Open Bug Bounty ID: OBB-555101 Description| Value ---|--- Affected Website:| visitcuba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sandvikensbyggmaskiner.se XSS vulnerability
Open Bug Bounty ID: OBB-554827 Description| Value ---|--- Affected Website:| sandvikensbyggmaskiner.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
stangelas.nuigalway.ie XSS vulnerability
Open Bug Bounty ID: OBB-554647 Description| Value ---|--- Affected Website:| stangelas.nuigalway.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Dojo Toolkit Cross-Site Scripting Vulnerability
Dojo Toolkit is the Dojo Foundation an open source DHTML toolkit implemented in the JavaScript language . The toolkit is easy to build interactive user interface , Dojo's extension package can make the user's code easier to maintain , less coupling , etc. dijit.Editor is one of the WYSIWYG editor...
The vulnerability of the mozilla::SVGGeometryFrame::GetCanvasTM() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a attacker to trigger a service failure.
The vulnerability of the mozilla::SVGGeometryFrame::GetCanvasTM function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird arises due to the execution of operations beyond the buffer boundaries when rendering hidden SVG elements. Exploiting this vulnerability can...
loomakliinik.emu.ee XSS vulnerability
Open Bug Bounty ID: OBB-553685 Description| Value ---|--- Affected Website:| loomakliinik.emu.ee Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
the-outpost.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-553529 Description| Value ---|--- Affected Website:| the-outpost.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
djpunjab.in XSS vulnerability
Open Bug Bounty ID: OBB-553515 Description| Value ---|--- Affected Website:| djpunjab.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
heino-cykler.dk XSS vulnerability
Open Bug Bounty ID: OBB-553414 Description| Value ---|--- Affected Website:| heino-cykler.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross-site Scripting (XSS)
dijit is vulnerable to cross-site scripting XSS attacks. Attackers can execute arbitrary webscript through the onload attributes of SVG elements...
chehumtimes.com XSS vulnerability
Open Bug Bounty ID: OBB-552852 Description| Value ---|--- Affected Website:| chehumtimes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ganews.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-552695 Description| Value ---|--- Affected Website:| ganews.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Node.js third-party modules: [uppy] Stored XSS due to crafted SVG file
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Module: Uppy. Affected version: 0.22.2...
