ecso.organon-officeweb.be Cross Site Scripting vulnerability OBB-2559918

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-27428

CVE-2022-27428 is a stored XSS in GalleryCMS v2.0, exploited via the album_name parameter in /index.php/album/add. The vulnerability arises from lack of input validation/escaping, allowing arbitrary web scripts when a crafted payload is submitted. Documents consistently describe the impact as cli...

ssl.web4u.cz Cross Site Scripting vulnerability OBB-2553231

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

basketball.providencesportsri.com Cross Site Scripting vulnerability OBB-2546059

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-38903

CVE-2021-38903 concerns IBM Cognos Analytics (versions 11.2.x and 11.1.x). The vulnerability is a cross-site scripting flaw caused by improper validation of user-supplied input in the web interface, enabling a remote attacker to inject script into a user’s browser session and potentially steal co...

laurelpedsmd.com Cross Site Scripting vulnerability OBB-2537558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chatwoot 跨站脚本漏洞

chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...

minidoctor.webwiders.in Cross Site Scripting vulnerability OBB-2525646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PYSEC-2022-43167

Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of Cisco Web Security Appliance allows a perpetrator to execute cross-site scripting attacks.

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of Cisco Web Security Appliance lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery (CSRF)

Exploit Tile: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery CSRF Exploit Author: LiquidWorm enteliTouch CSRF CSRF Add User:...

cloud.qxuanyun.com Cross Site Scripting vulnerability OBB-2517009

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mitsumorikun.com Cross Site Scripting vulnerability OBB-2514426

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

epiphanychurchvacaville.org Cross Site Scripting vulnerability OBB-2511531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerabilities in the implementation of the TCP/IP protocol stack of Cisco Email Security Appliance, Cisco Web Security Appliance web servers, and Cisco Secure Email and Web Manager (formerly known as Cisco Security Management Appliance) allow attackers to induce service interruptions.

The vulnerability of the TCP/IP protocol stack implementation of Cisco Email Security Appliance, Cisco Web Security Appliance, and Cisco Secure Email and Web Manager formerly Cisco Security Management Appliance is related to an exception handling error. Exploitation of this vulnerability could...

The vulnerability of the Web-Based Reputation Score (WBRS) mechanism in the Cisco AsyncOS operating system of Cisco Web Security Appliance internet gateways allows a perpetrator to access blocked content.

The vulnerability of the Web-Based Reputation Score WBRS mechanism in the Cisco AsyncOS operating system and Cisco Web Security Appliance firewalls is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to blocked content...

Explore CMS 1.0 SQL Injection

Exploit Title: explore CMS - Boolean Based SQL Injection Date: 19/03/2022 Exploit Author: Sajibe Kanti Vendor Name : EXPLORE IT Vendor Homepage: https://exploreit.com.bd CVE: On Request POC SQL Injection SQL injection is a web security vulnerability that allows an attacker to interfere with the...

doanhnghiep-02.web4s.vn Cross Site Scripting vulnerability OBB-2493567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-27476

CVE-2022-27476 concerns a cross-site scripting (XSS) vulnerability in Newbee-Mall v1.0.0. The issue manifests at the /admin/goods/update endpoint, where an attacker can inject a crafted payload into the goodsName parameter to execute arbitrary web scripts or HTML in the victim’s browser. The root...

gowdey.ppsri.org Cross Site Scripting vulnerability OBB-2489232

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...