CVE-2023-39712

CVE-2023-39712 corresponds to multiple XSS vulnerabilities in Free and Open Source Inventory Management System v1.0. The issue arises from lack of proper filtering/escaping of user-provided data in the Name, Address, and Company fields under the Add New Put section, enabling attackers to inject a...

CVE-2023-41575

CVE-2023-41575 describes multiple stored cross-site scripting (XSS) vulnerabilities in Blood Bank & Donor Management v2.2, specifically in /bbdms/sign-up.php, where crafted input in Full Name, Message, or Address can inject arbitrary web scripts/HTML. The core issue is stored XSS in that endpoint...

joshuahickmanmd.com Cross Site Scripting vulnerability OBB-3654096

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Oracle Linux 9 : firefox (ELSA-2023-4958)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4958 advisory. 102.15.0-1.0.1 - Update to 102.15.0 build2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Meeting Room Booking System 1.0 SQL Injection

Title: Meeting Room Booking System-1.0 Multiple - SQLi Author: nu11secur1ty Date: 09/06/2023 Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/meeting-room-booking-system/sectionDemo Reference: https://portswigger.net/web-security/sql-injection Description: The column...

CVE-2023-36492

SHIRASAGI is affected by a reflected cross-site scripting vulnerability (CVE-2023-36492) in versions prior to 1.18.0. An unauthenticated remote attacker can execute arbitrary scripts in the login user’s browser. Remediation: upgrade to SHIRASAGI v1.18.0 or later. If not feasible, consider applyin...

CVE-2023-40535

CVE-2023-40535 is a stored cross-site scripting vulnerability in the VI Web Client’s View setting page, exploitable by a remote authenticated attacker to inject scripts. Affected product: VI Web Client prior to version 7.9.6. Root cause/impact: arbitrary script execution in a logged-in user’s bro...

PT-2023-9240 · Trend Micro · Trend Micro Interscan Web Security Virtual Appliance

Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Web Security Virtual Appliance version 6.5 Description: A cross-site scripting XSS issue in the HTTP Inspection module of Trend Micro InterScan Web Security Virtual Appliance is related to the lack of protection for the...

Bus Reservation System 1.1 - Multiple-SQLi

Title: Bus Reservation System-1.1 Multiple-SQLi Author: nu11secur1ty Date: 08/26/2023 Vendor: https://www.phpjabbers.com/ Software: https://demo.phpjabbers.com/1693027053628/preview.php?lid=1 Reference: https://portswigger.net/web-security/sql-injection Description: The pickupid parameter appears...

Member Login Script 3.3 - Client-side desync Vulnerability

Title: Member Login Script 3.3 - Client-side desync Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Reference: https://portswigger.net/web-security/request-smuggling/browser/client-side-desync Description: The server appears to be vulnerable to client-side desync attacks. A POST request...

d113.web.wwi.dk Cross Site Scripting vulnerability OBB-3641337

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mediterranean-healthcare.com Cross Site Scripting vulnerability OBB-3639183

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

manukaku.com Cross Site Scripting vulnerability OBB-3636969

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PlayTube 3.0.1 Information Disclosure

Exploit Title: PlayTube 3.0.1 - Redirect Information Disclosure Exploit Author: CraCkEr Date: 19/08/2023 Vendor: PlayTube Vendor Homepage: https://playtubescript.com/ Software Link: https://demo.playtubescript.com/ Tested on: Windows 10 Pro Impact: Sensitive Information Leakage CVE: CVE-2023-4714...

relecentrum.hu Cross Site Scripting vulnerability OBB-3632559

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-37829

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.message parameter...

yuki.hu Cross Site Scripting vulnerability OBB-3630117

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-37830

General Solutions Steiner GmbH CASE 3 Taskmanagement V3.3 is affected by a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web scripts or HTML via the name parameter. The root cause is input handling/validation for the name field. Impact per sources: execution of m...

web.piopend.info Cross Site Scripting vulnerability OBB-3629022

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PHP JABBERS PHP Review Script 1.0 Cross Site Scripting

Title: PHPJABBERS-PHP Review Script-1.0 XSS-Reflected Author: nu11secur1ty Date: 08/31/2023 Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/php-review-script/ Reference: https://portswigger.net/web-security/cross-site-scripting/reflected Description: The value of the acti...