nicepebblessales.com XSS vulnerability

Open Bug Bounty ID: OBB-561274 Description| Value ---|--- Affected Website:| nicepebblessales.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Symantec Endpoint Protection Manager File Upload

File upload vulnerability in Symantec Endpoint Protection Manager Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

breednet.com.au XSS vulnerability

Open Bug Bounty ID: OBB-558120 Description| Value ---|--- Affected Website:| breednet.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Soyket Chowdhury Vehicle Sales Management System Code Execution Vulnerability

Soyket Chowdhury Vehicle Sales Management System is an online vehicle sales system script. A security vulnerability exists in multiple scripts in Soyket Chowdhury Vehicle Sales Management System version 2017-07-30. An attacker can exploit this vulnerability to obtain user login accounts and perfo...

Sql injection

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...

CVE-2017-1000474

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...

CVE-2017-1000474

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...

CVE-2017-1000474

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...

CVE-2017-1000474

The CVE refers to Soyket Chowdhury Vehicle Sales Management System (VSMS) v2017-07-30 with multiple vulnerabilities in login scripts (vehicle.php, profile.php, Actions.php, manage_employee.php, sell.php) enabling SQL Injection and Stored XSS that can lead to remote code execution. Connected data ...

PT-2018-5240

Name of the Vulnerable Software and Affected Versions Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 Description The issue affects multiple scripts, including login/vehicle.php, login/profile.php, login/Actions.php, login/manage employee.php, and login/sell.php, allowing for...

CVE-2017-1000474: Improper Neutralization of Special Elements used in an SQL Command

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...

WordPress ACF Frontend Display File Upload

File upload vulnerability in WordPress ACF Frontend Display plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress WPshop File Upload

File upload vulnerability in WordPress WPshop plugin ajax.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Gravity Forms File Upload

File upload vulnerability in WordPress Gravity Forms plugin upload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Trend Micro Kicks Off 2018 In Vancouver Helping Those In Need

The holiday season is traditionally a time for friends and family, gift-giving and celebrations. But it’s also a time to remember those less fortunate than ourselves, and to do what we can to make their lives better. As a responsible corporate citizen, Trend Micro is always keen to find new ways ...

Western Digital My Cloud File Upload

File upload vulnerability in Western Digital My Cloud multiuploadify.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ionicframework.com XSS vulnerability

Open Bug Bounty ID: OBB-501211 Description| Value ---|--- Affected Website:| ionicframework.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

cathedralroadcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-500269 Description| Value ---|--- Affected Website:| cathedralroadcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

Trend Micro InterScan Messaging Security Virtual Appliance WizardSetting_sys.imss RCE

Remote command execution vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance WizardSettingsys.imss sysdesname parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Shopify: Bypass Filter and get Stored Xss

Description Shopify allows developers to create a special type of application called a "Sales Channel". Developers are allowed to upload a 16x16 SVG "Navigation Icon" for their app provided the SVG follows the design guidelines which limits the allowed elements and attributes. For some reason whe...