The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a speciall...

CVE-2020-15307

Nozomi Guardian prior to 19.0.4 is affected by a stored XSS in the web front end. The root cause is lack of proper validation of client data by the WEB application, enabling an attacker to inject a crafted field name via a custom field to execute client-side code. Affected product: Nozomi Guardia...

mrohiohealthinsurance.com Cross Site Scripting vulnerability OBB-1210871

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-13423

Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...

XSS Platform is vulnerable to reloading

XSS Platform is an XSS penetration test management system. XSS Platform suffers from a reinstallation vulnerability that can be exploited by an attacker to cause a website to be reinstalled...

theperfectpour.com Cross Site Scripting vulnerability OBB-1208415

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

lehrertaschen-vergleich.de Cross Site Scripting vulnerability OBB-1207952

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Trend Micro Web Security - Remote Code Execution

This Metasploit module exploits multiple vulnerabilities together in order to achieve a remote code execution. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro Web Security Virtual...

org.webd.top Cross Site Scripting vulnerability OBB-1205246

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in Shijiazhuang Zhenhong Network Technology Co.

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd Shop7z online shopping system SQL injection vulnerability, an attacker can use the vulnerability t...

webmail.dominioz.com.br Cross Site Scripting vulnerability OBB-1205004

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

webfx.com Cross Site Scripting vulnerability OBB-1204383

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Online Student Enrollment System 1.0 - Cross-Site Request Forgery (Add Student)

Exploit Title: Online Student Enrollment System 1.0 - Cross-Site Request Forgery Add Student Google Dork: N/A Date: 2020-06-20 Exploit Author: BKpatron Vendor Homepage: https://www.campcodes.com/projects/php/4745/online-student-enrollment-system-in-php-mysqli/ Software Link:...

Trend Micro Interscan Web Security Virtual Appliance Detection Consolidation

Consolidation of Trend Micro Interscan Web Security Virtual Appliance detections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

WebPort 1.19.1 Cross Site Scripting

Exploit Title: WebPort 1.19.1 - Reflected Cross-Site Scripting Date: 2019-05-30 Exploit Author: Emre ÖVÜNÇ Vendor Homepage: https://webport.se/ Software Link: https://webport.se/nedladdningar/ Version: v1.19.1 Tested on: Windows/Linux CVE-2019-12461...

Trend Micro Web Security (Virtual Appliance) Remote Code Execution Exploit

This Metasploit module exploits multiple vulnerabilities together in order to achieve a remote code execution. Unauthenticated users can execute a terminal command under the context of the root user. The specific flaw exists within the LogSettingHandler class of administrator interface software...

CVE-2019-20841

Mattermost Server is affected by CVE-2019-20841 a CSRF issue that can enable account takeover via a crafted web site. The vulnerability is described across multiple sources as affecting Mattermost Server before versions 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. Connected documents corroborate th...

booksonline.com.ua Cross Site Scripting vulnerability OBB-1198857

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CurveBall – An Unimaginative Pun but a Devastating Bug

ARCHIVED STORY CurveBall – An Unimaginative Pun but a Devastating Bug By Steve Povolny · June 17, 2020 Enterprise customers looking for information on defending against Curveball can find information here. 2020 came in with a bang this year, and it wasn’t from the record-setting number of firewor...

elgea-habitat.com Cross Site Scripting vulnerability OBB-1197703

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...