Lucene search
+L

17019 matches found

CVE
CVE
added 2020/07/14 10:54 p.m.116 views

CVE-2020-1456

CVE-2020-1456 is a SharePoint Server cross-site scripting (XSS) vulnerability. The initial doc describes exploitation via an improperly sanitized crafted web request, enabling script execution in the user’s context (XSS). Connected documents (CNVD entries) corroborate a SharePoint Server XSS weak...

5.4CVSS5.1AI score0.02229EPSS
SaveExploits1References3Affected Software2
Akamai Blog
Akamai Blog
added 2020/07/14 3:50 p.m.22 views

The Interaction Between Identity Cloud and Akamai Edge Services

Akamai Identity Cloud is a purpose-built customer identity and access management CIAM platform specifically architected to meet the needs of application owners and API providers' consumer identity needs. As a cloud-based SaaS offering, all interactions with Identity Cloud occur over the public...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/07/14 12:00 a.m.347 views

Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro Web Security Virtual Appliance Remote Code Execution', 'Description' = %q This module exploits multiple vulnerabilities together in...

8.8CVSS7.9AI score0.8776EPSS
SaveExploits7
zdt
zdt
added 2020/07/14 12:00 a.m.242 views

Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 Remote Code Execution Exploit

Exploit for multiple platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro Web Security Virtual Appliance Remote Code Execution', 'Description' = %q...

6.5CVSS0.89772EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2020/07/14 12:00 a.m.445 views

Trend Micro Web Security Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro Web Security Virtual Appliance Remote Code Execution', 'Description' = %q This module exploits multiple vulnerabilities together in...

7.5CVSS0.89772EPSS
SaveExploits10
Openbugbounty
Openbugbounty
added 2020/07/10 3:13 p.m.9 views

agenziavacanzemonteamiata.it Cross Site Scripting vulnerability OBB-1220826

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/09 6:00 a.m.8 views

turuncukuafor.com Cross Site Scripting vulnerability OBB-1219379

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/08 1:46 p.m.7 views

profiles.healthsciencessc.org Cross Site Scripting vulnerability OBB-1218752

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2020/07/08 12:00 a.m.19 views

HCL AppScan Cross-Site Scripting Vulnerability

HCL AppScan is a suite of dynamic analysis testing tools from HCL India, which is primarily used for web security testing. A cross-site scripting vulnerability exists in HCL AppScan Enterprise Edition version 10.0.0 and earlier. The vulnerability stems from the lack of proper validation of...

6.1CVSS6.4AI score0.00648EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/08 12:00 a.m.18 views

Unspecified Vulnerability in HCL AppScan Enterprise advisory API

HCL AppScan Enterprise is a suite of dynamic analysis and testing tools from HCL India, which is primarily used for web security testing. A security vulnerability exists in the Advisory API documentation in HCL AppScan Enterprise 10.0.0 and earlier versions. The vulnerability can be exploited by ...

4.3CVSS6.8AI score0.0075EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2020/07/07 9:30 p.m.139 views

Scant3R - Web Security Scanner

ScanT3r - Web Security Scanner / / / / / \ / / / / / / / / / / // // / / / / / / / / ///,// /// /// Coded By : Khaled Nassar @knassar702 Detect This vulnerabilities Remote Code Execution Linux XSS Reflected Template Injection Jinja2 ERB Java Twig Freemarker SQlInjection ScreenShot: GIF...

7.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a speciall...

5.4CVSS6AI score0.01488EPSS
SaveExploits0References2
CVE
CVE
added 2020/06/30 5:50 p.m.51 views

CVE-2020-15307

Nozomi Guardian prior to 19.0.4 is affected by a stored XSS in the web front end. The root cause is lack of proper validation of client data by the WEB application, enabling an attacker to inject a crafted field name via a custom field to execute client-side code. Affected product: Nozomi Guardia...

6.1CVSS5.9AI score0.00686EPSS
SaveExploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2020/06/29 3:17 p.m.16 views

mrohiohealthinsurance.com Cross Site Scripting vulnerability OBB-1210871

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
OSV
OSV
added 2020/06/29 2:15 p.m.9 views

CVE-2020-13423

Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...

4.8CVSS5.8AI score0.01359EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/06/29 12:00 a.m.6 views

XSS Platform is vulnerable to reloading

XSS Platform is an XSS penetration test management system. XSS Platform suffers from a reinstallation vulnerability that can be exploited by an attacker to cause a website to be reinstalled...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/06/27 4:10 p.m.7 views

theperfectpour.com Cross Site Scripting vulnerability OBB-1208415

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/06/27 2:21 a.m.10 views

lehrertaschen-vergleich.de Cross Site Scripting vulnerability OBB-1207952

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
0daydb
0daydb
added 2020/06/24 8:21 a.m.814 views

Trend Micro Web Security - Remote Code Execution

This Metasploit module exploits multiple vulnerabilities together in order to achieve a remote code execution. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro Web Security Virtual...

7.5CVSS0.5AI score0.89772EPSS
SaveExploits17
Openbugbounty
Openbugbounty
added 2020/06/24 7:22 a.m.9 views

org.webd.top Cross Site Scripting vulnerability OBB-1205246

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Rows per page
Query Builder