The vulnerability in the esc_listener.py script of the network management interface for Cisco Elastic Services Controllers allows a attacker to execute arbitrary commands on behalf of the “tomcat” user.

The vulnerability of the esclistener.py script for controlling Cisco Elastic Services Controllers exists because measures to neutralize the special elements used in the operating system command have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary comman...

CVE-2017-7693

Directory traversal vulnerability in viewerscript.jsp in Riverbed OPNET App Response Xpert ARX version 9.6.1 allows remote authenticated users to inject arbitrary commands to read OS files...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2017-20384)

Cisco Finesse is a suite of call center management software from Cisco in the United States. A cross-site scripting vulnerability exists in the Cisco Finesse WEB script, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain...

CVE-2017-2274

Cross-site scripting vulnerability (CVE-2017-2274) affects Buffalo WMR-433 and WMR-433W wireless LAN routers. WMR-433: firmware 1.02 and earlier; WMR-433W: firmware 1.40 and earlier. An attacker can inject arbitrary web script or HTML via unspecified vectors, potentially affecting the device’s we...

CVE-2017-9361

WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...

Stored Cross-Site Scripting Vulnerability in Seeding.com App

The Sowing the Seed App is a pregnancy preparation knowledge platform designed to answer the questions of moms who are preparing for pregnancy and getting pregnant. Sowseed.com App suffers from a stored cross-site scripting vulnerability due to the program's failure to filter user-submitted data...

Stored Cross-Site Scripting Vulnerability in HDWiki

Interactive Wiki open source system HDwiki is Interactive Online Beijing Technology Co., Ltd. of an independent intellectual property rights of the Chinese Wiki Wiki system. HDWiki 6.0 version of the existence of stored cross-site scripting vulnerabilities , the system uses a blacklist mechanism ...

CVE-2017-8923

Removed by vendor...

Jenkins unauthorized code execution vulnerability analysis, updated the vulnerability of the environment, to detect script-vulnerability warning-the black bar safety net

A, summary CloudBees Jenkins 2.32.1 version exists in Java deserialization vulnerability, and ultimately can lead to remote code execution. Jenkins is a continuous integration continuous integration and continuous delivery system, can improve the software development process of the Central Africa...

Pixie Cross-Site Scripting Vulnerability

Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4, which stems from the program not properly validating user-submitted input. A remote attacker can...

GamePanelX-V3 Cross-Site Scripting Vulnerability

GamePanelX-V3 is a free, open source game control panel. A cross-site scripting vulnerability exists in GamePanelX-V3 version 3.0.12, which stems from the GamePanelX-V3-master/ajax/ajax.php URL failing to adequately filter user-supplied data. A remote attacker can exploit this vulnerability to...

CVE-2017-5963

An issue was discovered in caddy for TYPO3 before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the "paymillToken" HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" URL. An attacker could execute...

Home of Viral Images, Videos and Articles Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Home of Viral Images, Videos and Articles Script Script Buy Now:...

Study Abroad Education Website Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now: http://www.popularclones.com/products/Study-Abroad-Educational-Website Author: Ihsan Sencan Author Web:...

Yoga and Fitness Website Script - SQL Injection

Yoga and Fitness Website Script - SQL Injection Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Yoga and Fitness Website Script Script Buy Now: http://www.popularclones.com/products/Yoga-and-Fitness-Website Author: Ihsan Sencan Author Web:...

Shiksha Educational Website Script - SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Shiksha Educational Website Script Script Buy Now: http://www.popularclones.com/products/Shiksha-Educational Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Finance Website Script - SQL Injection

Finance Website Script - SQL Injection Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Finance Website Script Script Buy Now: http://www.popularclones.com/products/Finance-Website-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

Maian Weblog Cross-Site Request Forgery Vulnerability

Maian Weblog is a free and open source PHP blogging system developed by British software developer David Ian Bennett. The system includes modules for commenting, searching, uploading images and videos. A cross-site scripting vulnerability exists in the index.php script of Maian Weblog 4.0 and...

Code injection

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to obtain sensitive information from 1 a backup of the device configuration via script/cfgshow.php or 2 PCAP files via script/system/tcpdump.php...

UBUNTU-CVE-2015-5714

Cross-site scripting XSS vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags...