CVE-2018-13329

Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter...

CVE-2018-16130

System command injection in requestmitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter...

Microsoft BingPlaces - TrackEmailOpen (url) Open Redirect

Document Title: =============== Microsoft BingPlaces - TrackEmailOpen url Open Redirect References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2167 MSRC ID: CRM:0461060024 Acknowledgements: https://technet.microsoft.com/en-us/security/cc308589 Vulnerability...

alamy.es XSS vulnerability

Open Bug Bounty ID: OBB-696145 Description| Value ---|--- Affected Website:| alamy.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GHSA-7HJP-97G3-RQ93 Path Traversal in minsoft:ms-mcms

An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file in the position parameter to an arbitrary directory via a ../ Directory Traversal in the url parameter...

CVE-2018-18867

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

CVE-2018-18867: Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

PT-2018-14701

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager version 9.13.4 Description A Server-Side Request Forgery SSRF issue was discovered in the software. The issue is related to an incomplete fix for a previous problem and can be exploited via the "url" parameter in...

PT-2018-14680

Name of the Vulnerable Software and Affected Versions MCMS version 4.6.5 Description An issue was discovered in the GeneraterAction.java file, allowing an attacker to write a .jsp file to an arbitrary directory via a Directory Traversal in the url parameter, using the position parameter...

WordPress Pie Register 3.0.15 Cross Site Scripting

===================================================================================== Pie Register v3.0.15 WordPress Plugin - Cross-Site Scripting Vulnerability in Login ===================================================================================== Exploit Title: Pie Register v3.0.15...

CVE-2018-16283

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

CVE-2018-16283: Improper Limitation of a Pathname to a Restricted Directory

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

PT-2018-13462

Name of the Vulnerable Software and Affected Versions Wechat Broadcast plugin versions 1.2.0 and earlier Description The issue allows Directory Traversal via the url parameter in the Image.php file. Recommendations For Wechat Broadcast plugin versions 1.2.0 and earlier, update to a version later...

CVE-2018-16444

An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...

CVE-2018-16444

An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...

SeaCMS Server-Side Request Forgery Vulnerability

SeaCMS Ocean CMS is a professional open source free PHP film and television system. There is a server-side request forgery vulnerability in adm1n/adminreslib.php in 6.61 and earlier versions of SeaCMS, which can be exploited by an attacker through the url parameter to conduct a server-side reques...

CVE-2018-16444: Server-Side Request Forgery (SSRF)

An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...

PT-2018-13571

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description An issue was discovered in SeaCMS, where the adm1n/admin reslib.php file has a Server-Side Request Forgery SSRF vulnerability via the url parameter. Recommendations For SeaCMS version 6.61, consider restricting...

nskelectronics.com XSS vulnerability

Open Bug Bounty ID: OBB-672584 Description| Value ---|--- Affected Website:| nskelectronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gatewaypga.bluegolf.com XSS vulnerability

Open Bug Bounty ID: OBB-666088 Description| Value ---|--- Affected Website:| gatewaypga.bluegolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...