989 matches found
Authentication flaw
Monkey HTTP Daemon: broken user name authentication...
CVE-2013-2159
Monkey HTTP Daemon: broken user name authentication...
NiceHash Miner Information Disclosure Vulnerability
NiceHash Miner is a mining software for Bitcoin. A security vulnerability exists in NiceHash Miner versions prior to 2.0.3.0. An attacker could exploit the vulnerability to enumerate user names...
CVE-2012-4384
letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...
Cross site scripting
letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...
CVE-2012-4384
letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...
CVE-2012-4384: Improper Neutralization of Input During Web Page Generation
letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...
PT-2019-6771
Name of the Vulnerable Software and Affected Versions letodms affected versions not specified Description The issue concerns multiple XSS problems, including Reflected XSS in the Login Page, Stored XSS in the Document Owner/User name, and Stored XSS in the Calendar. Recommendations At the moment,...
Atlassian Confluence 6.15.1 Directory Traversal
Exploit Title: Atlassian Confluence 6.15.1 - Directory Traversal Google Dork: N/A Date: 2019-11-11 Exploit Author: max7253 Vendor Homepage: https://www.atlassian.com Software Link: https://www.atlassian.com/software/confluence/download-archives Version: 6.15.1 Tested on: Microsoft Windows 7...
PT-2019-15242 · Microsoft +1 · Office Excel +1
Name of the Vulnerable Software and Affected Versions: codepress-admin-columns plugin version 3.4.6 Description: A CSV injection in the codepress-admin-columns plugin for WordPress allows malicious users to gain remote control of other computers. By choosing formula code as their first or last...
squid: XSS via user_name or auth parameter in cachemgr.cgi
The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter...
JetBrains Hub Information Disclosure Vulnerability (CNVD-2019-40586)
JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in versions prior to JetBrains Hub 2019.1.11738. An attacker could exploit the vulnerability to enumerate user...
ClipSoft REXPERT Information Disclosure Vulnerability
ClipSoft REXPERT is a report generation program from ClipSoft Korea. An information disclosure vulnerability exists in ClipSoft REXPERT. An attacker can exploit the vulnerability to disclose a user's name via the session file path of HTTP response data...
Infosysta Jira 1.6.13_J8 User Name Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-043 Product: In-App & Desktop Notification for Jira Manufacturer: Infosysta Affected Versions: 1.6.13J8 Tested Versions: 1.6.13J8 Vulnerability Type: Authentication/Authorization Bypass Risk Level: Medium Solution Status: Clos...
Cross-site scripting in Sakai
Sakai through 12.6 allows XSS via a chat user name...
CVE-2019-16148
Sakai through 12.6 allows XSS via a chat user name...
Cross site scripting
Sakai through 12.6 allows XSS via a chat user name...
CVE-2019-16148
Sakai through 12.6 allows XSS via a chat user name...
CVE-2019-16148: Improper Neutralization of Input During Web Page Generation
Sakai through 12.6 allows XSS via a chat user name...
PT-2019-14544
Name of the Vulnerable Software and Affected Versions Sakai versions prior to 12.7 Description The issue allows for cross-site scripting XSS attacks via a chat user name. Recommendations For versions prior to 12.7, update to version 12.7 or later to resolve the issue...