CVE-2018-15495: Improper Limitation of a Pathname to a Restricted Directory

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curlexec call, as demonstrated by a file:///etc/passwd value...

alajeeeb.com XSS vulnerability

Open Bug Bounty ID: OBB-665642 Description| Value ---|--- Affected Website:| alajeeeb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

le-sudoku.fr XSS vulnerability

Open Bug Bounty ID: OBB-660064 Description| Value ---|--- Affected Website:| le-sudoku.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14728

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

CVE-2018-14728

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

PT-2018-12685

Name of the Vulnerable Software and Affected Versions Responsive FileManager version 9.13.1 Description The issue allows for Server-Side Request Forgery SSRF via the url parameter in the upload.php file. Recommendations For Responsive FileManager version 9.13.1, consider restricting access to the...

CVE-2018-14728: Server-Side Request Forgery (SSRF)

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

CVE-2018-14929: Improper Neutralization of Input During Web Page Generation

Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp aka home page url parameter...

PT-2018-6273 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: An attacker could send an authenticated HTTP request to trigger this issue in Insteon Hub. The value for the s url key is copied using strcpy to the buffer at 0xa0001a0c. This buffer is 16 bytes large, an...

ferien-urlaub-schwarzwald.de XSS vulnerability

Open Bug Bounty ID: OBB-653923 Description| Value ---|--- Affected Website:| ferien-urlaub-schwarzwald.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

timothychooi.com XSS vulnerability

Open Bug Bounty ID: OBB-650439 Description| Value ---|--- Affected Website:| timothychooi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vulnerability

Microsoft Forefront Unified Access Gateway is an SSL VPN gateway server from Microsoft. Microsoft Forefront Unified Access Gateway 2010 external DNS interaction vulnerability allows remote attackers to Trigger URLs in the outbound DNS query origurl parameter from arbitrary hosts via a...

Starbucks: athome.starbucks.com - URL parameter tampering of review forms permitted possible content injection

jackb898 discovered that the review forms on the informational site athome.starbucks.com was susceptible to parameter tampering possibly allowing for creation of limited custom review form content. @jackb898 — thank you for reporting the original vulnerability, the additional information and for...

CVE-2017-16091: Improper Limitation of a Pathname to a Restricted Directory

xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16104: Improper Limitation of a Pathname to a Restricted Directory

citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16155: Improper Limitation of a Pathname to a Restricted Directory

fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16175: Improper Limitation of a Pathname to a Restricted Directory

ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16143: Improper Limitation of a Pathname to a Restricted Directory

commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16134: Improper Limitation of a Pathname to a Restricted Directory

httpstaticsimple is an http server. httpstaticsimple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16174: Improper Limitation of a Pathname to a Restricted Directory

whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...