DotCMS 20.11 Cross Site Scripting

Exploit Title: DotCMS 20.11 - Stored Cross-Site Scripting Exploit Author: Hardik Solanki Vendor Homepage: https://dotcms.com/ Version: 20.11 Tested on Windows 10 Vulnerable Parameters: Template Title Steps to reproduce: 1. Login With Admin Username and password. 2. Navigate to Site -- Template --...

Exploit for Race Condition in Openbsd Openssh

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2...

Mail.ru: CSRF in updating username https://pw.mail.ru/

CSRF vulnerability in pw.mail.ru allowed to change nickname with cross-site request...

GaussDB Kernel: Deleting the Default Username

You are advised not to use a well-known username, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

CentOS: Security Advisory for fence-agents-aliyun (CESA-2020:5003)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SourceCodester Water Billing System SQL Injection Vulnerability

SourceCodester Water Billing System is a water billing system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Water Billing System version 1.0, which stems from a failure of the program to properly validate user input, and allows an attacker to perform SQL injectio...

The vulnerability of the command-line interface of the Cisco Integrated Management Controller allows a hacker to discover all existing user names.

The vulnerability of the command-line interface of the Cisco Integrated Management Controller remote management device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to discover all existing user names...

CodeLathe FileCloud Information Disclosure Vulnerability

codelathe filecloud is a set of file access, synchronization and sharing solutions from codelathe in the United States for use within the enterprise. An information disclosure vulnerability exists in versions prior to CodeLathe FileCloud 20.2.0.11915. An attacker can exploit the vulnerability to...

The vulnerability of the Cisco Integrated Management Controller, a remote server management tool, relates to the exposure of information through inconsistencies, allowing attackers to determine all existing user names.

The vulnerability of the Cisco Integrated Management Controller, a remote administration tool, is related to the exposure of information through mismatches. Exploiting this vulnerability could allow an attacker operating remotely to discover all existing user names...

CVE-2020-28183

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php...

Sql injection

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php...

Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-63970)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in the "Manage Users" username field in Nagios XI versions prior to 5.7.5. No details of t...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

Design/Logic Flaw

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

Nagios XI 跨站脚本漏洞

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in the "Manage Users" username field in Nagios XI versions prior to 5.7.5. No details of t...

CMSuno Code Injection Vulnerability

CMSUno is an easy and handy tool for creating one-page responsive websites. A code injection vulnerability exists in CMSuno 1.6.2. The vulnerability can be exploited to inject malicious PHP code as a "username" when changing a username and password, which can be used to run commands on the server...

Bludit Panel Brute Forcer Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Bludit Panel Brute force', 'Description' = %q This Module performs brute force attack on Bludit Panel. , 'Author' = 'Eren Simsek ', 'License' =...

CVE-2020-25557

In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. After that, when attacker logs in to the application, attacker's code will be run. As a result of this vulnerability, authenticated user can run command on the server...