You can be tracked online using your Chrome browser extensions

A researcher has found a way to generate a fingerprint of your device from your installed Google Chrome extensions, and then use that fingerprint to track you online. Fingerprinting is a way of figuring out what makes your device unique and then using that to identify you as you move around the...

Hindu Matrimonial Script 安全漏洞

PHP Matrimonial Script Hindu Matrimonial Script is an online matrimonial service website from PHP Matrimonial Script India. A security vulnerability exists in Hindu Matrimonial Script, which stems from improperly managed permissions in /admin/searchview.php...

phpIPAM 1.4.5 Remote Code Execution

Exploit Title: phpIPAM 1.4.5 - Remote Code Execution RCE Authenticated Date: 2022-04-10 Exploit Author: Guilherme '@behiNdyk1' Alves Vendor Homepage: https://phpipam.net/ Software Link: https://github.com/phpipam/phpipam/releases/tag/v1.4.5 Version: 1.4.5 Tested on: Linux Ubuntu 20.04.3 LTS...

kischuni.de Cross Site Scripting vulnerability OBB-2656092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

studiogi-arredamento.it Cross Site Scripting vulnerability OBB-2654438

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

u5cms 跨站脚本漏洞

u5cms is u5cms open source a medium-sized web content management system . u5cms 8.3.5 version of a security vulnerability , the vulnerability stems from the default home page does not check the user input parameters are legitimate , an attacker can use this vulnerability to malicious script...

link.springer.com.library.neu.edu.tr Cross Site Scripting vulnerability OBB-2651222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second RPS distributed denial-of-service DDoS attack last week, making it the largest HTTPS DDoS attack detected to date. The web performance and security company said the attack was directed...

CVE-2022-1969

CVE-2022-1969 (WordPress Mobile Browser Color Select plugin) describes a Cross-Site Request Forgery vulnerability in versions up to 1.0.1, caused by missing or incorrect nonce validation on the admin_update_data() function. The issue allows unauthenticated attackers to induce an administrator to ...

CVE-2022-31398

CVE-2022-31398 is a cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2, specifically involving /staff/tools/custom-fields. The root cause is a lack of parameter filtering/escaping in the email name field, enabling an attacker to inject arbitrary web scripts or HTML. Impact is limited to...

dr-fehlert.de Cross Site Scripting vulnerability OBB-2648635

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2035

The CVE-2022-2035 entry describes a reflected XSS in the SCORM Engine’s playerConfUrl parameter in /defaultui/player/modern.html. Affected versions are SCORM Engine < 20.1.45.914 and 21.1.x

designbiz.com Cross Site Scripting vulnerability OBB-2643423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tualityphysicians.com Cross Site Scripting vulnerability OBB-2640076

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kas.de Cross Site Scripting vulnerability OBB-2636208

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Bypass filter - Stored XSS in Resources

Description Website does incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This fix for this bug https://huntr.dev/bounties/dcf87c0b-6188-4817-8798-ef1e2581b15a/ can be bypassed using bellow payload...

CVE-2022-29540

resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP GET parameter that reflects user input without sanitization. This exists on numerous application endpoints,...

Cross site scripting

A cross-site scripting XSS vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter...

CVE-2019-12349

The CVE-2019-12349 entry applies to the zzCMS 2019 CMS, where a SQL injection exists in /admin/dl_sendsms.php via the id parameter. The vulnerability is rooted in improper handling of the id input, with public sources citing the lack of single quotes as the underlying cause (CNVD-2022-56481, RH a...

ChatBot App with Suggestion SQL注入漏洞

ChatBot App with Suggestion is a ChatBot application with Suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to SQL injection, which originates from /simplechatbot/ admin/?page=responses/manageresponse&id=The page lacks validation for external inpu...