SmartFTP Client 9.0.2615.0 - Denial of Service (PoC)

Exploit Title: SmartFTP Client 9.0.2615.0 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2018-10-30 Vendor Homepage: https://www.smartftp.com/en-us/ Software Link: https://www.smartftp.com/en-us/download Tested Version: 9.0.2615.0 Tested on: Windows 10 Single Language x64...

CVE-2018-16775

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...

Cross site scripting

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...

CVE-2018-16775

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...

CVE-2018-16775

CVE-2018-16775 affects Victor CMS up to 2018-05-10, with a reflected/Stored XSS via the site name in the Categories menu. The connected sources confirm the vulnerability type but do not specify affected versions, patch availability, or exploitation status. The documents do not provide remediation...

PT-2018-13739

Name of the Vulnerable Software and Affected Versions Victor CMS versions prior to 2018-05-10 Description An issue was discovered that allows for XSS via the site name in the "Categories" menu. Recommendations For versions prior to 2018-05-10, update to a version released after 2018-05-10 to...

CVE-2018-16775: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...

Code injection

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603

Victor CMS (up to 2018-05-10) is affected by a cross-site scripting (XSS) vulnerability in the Author field of the “Leave a Comment” screen. The issue allows injected script via this input. Root cause details are not provided beyond the XSS vector; no patch/version details are enumerated in the s...

CVE-2018-15603

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

Victor CMS Cross-Site Scripting Vulnerability

Victor CMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in Victor CMS 2018-05-10 and earlier versions. A remote attacker can exploit the vulnerability to execute JavaScript code with the Author field on the 'Leave a Comment' page...

PT-2018-13111

Name of the Vulnerable Software and Affected Versions Victor CMS versions prior to 2018-05-10 Description An issue was discovered that allows for XSS via the Author field of the "Leave a Comment" screen. Recommendations For versions prior to 2018-05-10, update to a version released after 2018-05-...

Carbon Black’s Victor Baez Recognized as a 2018 CRN Channel Chief

CRN®, a brand of The Channel Company, has named Victor Baez, Vice President, WW Channels of Carbon Black, to its prestigious list of 2018 Channel Chiefs. The executives on this annual list represent top leaders in the IT channel who excel at driving growth and revenue in their organization throug...

capchits.com XSS vulnerability

Open Bug Bounty ID: OBB-339408 Description| Value ---|--- Affected Website:| capchits.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu Update for freetype vulnerability USN-466-1

Ubuntu Update for Linux kernel vulnerabilities USN-466-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4661.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype vulnerability USN-466-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

GLSA-200706-01 : libexif: Integer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200706-01 libexif: Integer overflow vulnerability Victor Stinner reported an integer overflow in the exifdataloaddataentry function from file exif-data.c while handling Exif data. Impact : An attacker could entice a user to proces...