17018 matches found
Trend Micro InterScan Web Security Virtual Appliance 操作系统命令注入漏洞
Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command injection vulnerability exists in AddVLANItem in Trend Micro InterScan Web...
EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass
Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass Date: 17-11-2020 Exploit Author: Kislay Kumar Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/user-registration-and-login-system-with-admin-pane=l/ Version:...
Trend Micro InterScan Web Security Virtual Appliance 缓冲区错误漏洞
The Trend Micro InterScan Web Security Virtual Appliance is a security gateway that combines application control with zero-day vulnerability detection, advanced anti-malware scanning, real-time Web reputation, and flexible URL filtering to provide superior Internet threat protection. A buffer...
Trend Micro InterScan Web Security Virtual Appliance 缓冲区错误漏洞
Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Trend Micro Web security gateway that provides dynamic, integrated security for enterprise networks against Web-based threats. A stack buffer overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance 6.5...
Trend Micro InterScan Web Security Virtual Appliance 操作系统命令注入漏洞
Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance...
EgavilanMedia User Registration And Login System With Admin Panel SQL Injection
Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass Date: 17-11-2020 Exploit Author: Kislay Kumar Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/user-registration-and-login-system-with-admin-pane=l/ Version:...
SQL Injection Vulnerability in OurPHP Co***.php File
OurPHP is a PHP+MySQL based development of W3C-compliant website building system. OurPHP Co.php file contains SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Touchbase.io 1.10 - Stored Cross Site Scripting
Exploit Title: Touchbase.io 1.10 - Stored Cross Site Scripting Date: 2020-11-11 Exploit Author: Simran Sankhala Vendor Homepage: https://touchbase.ai/ Software Link: https://touchbase.ai/ Version: 1.1.0 Tested on: Windows 10 Proof Of Concept: touchbase.ai application allows stored XSS, via the 'A...
encontrosquentes.pt Cross Site Scripting vulnerability OBB-1496983
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mecateengenharia.com.br Cross Site Scripting vulnerability OBB-1494443
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
b2b.araba40.eus Cross Site Scripting vulnerability OBB-1493554
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
wb2.webjean.org Cross Site Scripting vulnerability OBB-1493513
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
U.S. Dept Of Defense: Reflected XSS on https://███/████via hidden parameter "█████████"
Hi everyone : I found a Reflected XSS on https://█████/█████████via hidden parameter "██████████". Steps To Reproduce: - Use your favorite web browser - Go to : https://█████/████████&██████=XXX%22%3E%3Cscript%3Ealert%27Reflected%20XSS%20here%27%3C/script%3E An XSS is triggered ! The initial page...
suncomotors.com.au Cross Site Scripting vulnerability OBB-1490383
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kocarkyplzen.cz Cross Site Scripting vulnerability OBB-1488388
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
webber.nl Cross Site Scripting vulnerability OBB-1487897
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CMSUno 1.6.2 Remote Code Execution
Exploit Title: CMSUno 1.6.2 - 'lang' Remote Code Execution Authenticated Google Dork: N/A Date: 2020.09.30 Exploit Author: Fatih Çelik Vendor Homepage: https://github.com/boiteasite/cmsuno/ Software Link: https://github.com/boiteasite/cmsuno/ Blog:...
iselinfire.org Cross Site Scripting vulnerability OBB-1485514
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
secure.webfeepay.com Cross Site Scripting vulnerability OBB-1481811
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
