CVE-2014-4160: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the testcanvas node in SAP NetWeaver Business Client NWBC allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 sap-accessibility parameter...

PT-2014-5711

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Client NWBC affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the testcanvas node of SAP NetWeaver Business Client NWBC. These vulnerabilities allow remot...

openSUSE Security Update : vte (openSUSE-SU-2010:0404-1)

VTE was vulnerable to an old title set+query attack which could be used by remote attackers to execute arbitrary code CVE-2010-2713. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update vte-2729. T...

PT-2014-5687

Name of the Vulnerable Software and Affected Versions Best Soft Inc. BSI Advance Hotel Booking System version 2.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the title parameter in the booking...

CVE-2014-4035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc...

OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc...

OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc...

IPSwitch IMail Server WEB client 12.4 persistent XSS

Exploit for windows platform in category web applications Exploit Title: IPSwitch IMail Server WEB client 12.4 persistent XSS Google Dork: Date: 3 june 2014 Exploit Author: Peru GoSecure! Vendor Homepage: www.ipswitch.com Software Link: http://www.imailserver.com/try/ Version: Tested on 12.3 and...

CVE-2013-2618

Cross-site scripting XSS vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the maptitle parameter...

PT-2014-2602

Name of the Vulnerable Software and Affected Versions Network Weathermap versions prior to 0.97b Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the map title parameter in the editor.php file. Recommendations...

CVE-2013-2618

Cross-site scripting XSS vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the maptitle parameter. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2014-1882

Name of the Vulnerable Software and Affected Versions xmonad-contrib versions prior to 0.11.2 Description The issue allows remote attackers to execute arbitrary commands via a web page title. This can be achieved when the user clicks on the xmobar window title, as demonstrated using an action tag...

CVE-2014-3840

Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...

WordPress bib2html 0.9.3 Cross Site Scripting Vulnerability

WordPress bib2html plugin version 0.9.3 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress...

FineCMS v2.3.0一处xss，专业盲打管理员！

简要描述： 呵呵 详细说明： 本地测试！！ 在会员空间-图书-发布-书名处插入xss代码 返回我的空间查看下待审核的图书，弹窗了！ 用google浏览器登录后台也弹窗了 后台查看源码！ 漏洞证明： 求rank，前面漏洞求审核！！...

CVE-2014-3738

Cross-site scripting XSS vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the title of a device...

CVE-2014-3738: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the title of a device...

PT-2014-5474

Name of the Vulnerable Software and Affected Versions Zenoss version 4.2.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the title of a device. This could potentially lead to unauthorized access or control of the affected system...

CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9...