March 2020 -- Akamai Edge Security: Leader in Five Forrester Wave Reports

Forrester has named Akamai a Leader in five different Wave and New Wave reports. This significant achievement reflects the strength of Akamai's intelligent edge platform for securing and delivering digital experiences across our entire security portfolio. Forrester Wave Leaders are the top vendor...

SQL Injection Vulnerability in Heybbs Micro Community

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs micro-community SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

wifidanang.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1122271 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting wifidanang.net website and...

fujibird.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting fujibird.com website and its users. Following coordinated...

The vulnerability of Cisco Cloud Web Security’s web interface allows attackers to execute arbitrary SQL queries.

The vulnerability of Cisco Cloud Web Security’s web interface relates to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the message filtering function of Cisco AsyncOS software in Cisco Email Security Appliances and Cisco Content Security Management Appliances, as well as in Cisco Web Security Appliances, allows attackers to trigger service interruptions.

The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances, Cisco Content Security Management Appliances, and Cisco Web Security Appliances is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to...

CVE-2019-16063

CVE-2019-16063 affects NETSAS Enigma NMS 65.0.0 and earlier. The vulnerability is an information disclosure where sensitive data rendered in web pages is not encrypted, allowing an attacker to expose unencrypted sensitive data. No exploit details or affected versions beyond 65.0.0 and prior are p...

XSS vulnerability in Guojiz web navigation system (CNVD-2020-26535)

Guojiz website navigation system is a navigation website source code developed by PHP+MySQL with MYSQL database. There is an XSS vulnerability in the Guojiz navigation system that can be exploited by an attacker to obtain an administrator cookie...

Netlink GPON Router 1.0.11 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Netlink GPON Router 1.0.11 - Remote Code Execution Exploit Author: shellord Vendor Homepage: https://www.netlink-india.com/ Version: 1.0.11 Tested on: Windows 10 CVE: N/A Exploit : curl -L -d "targetaddr=;ls...

PayloadsAllTheThings

This repository is an offensive tool for Web Application Security and Pentest/CTF. It contains a list of useful payloads and bypass for various web application security vulnerabilities and penetration testing. The repository includes tools and exploits for vulnerabilities such as CRLF injection,...

CVE-2020-9443

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...

Design/Logic Flaw

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...

CVE-2020-9443

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...

CVE-2019-19615

CVE-2019-19615 concerns multiple XSS vulnerabilities in the FreePBX Backup & Restore module (versions 14.0.10.2 through 14.0.10.7). The issue arises when an attacker manipulates the id parameter on the backup configuration screen at /admin/config.php?display=backup, causing a crafted link to rend...

Mozilla: Use-after-free when removing data about origins

The Mozilla Foundation Security Advisory describes this flaw as: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash...

goodtires.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1118487 Security Researcher foulenzer Helped patch 132 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting goodtires.de website and i...

Webshell bypass vulnerability in Web Security Dog (apache version V4.0) of Xiamen Service Cloud Information Technology Co. Ltd (CNVD-2020-23541)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 has a webshell bypass vulnerability. Attackers can use the vulnerability to bypass th...

Webshell bypass vulnerability in Web Security Dog (apache version V4.0) of Xiamen Service Cloud Information Technology Co.

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 has a webshell bypass vulnerability. Attackers can use the vulnerability to bypass th...

Cisco Web Security Appliance (WSA) GUI Denial of Service Vulnerability

According to its self-reported version, the Cisco Web Security Appliance is affected by a Denial of Service vulnerability. The vulnerability is due to improper validation of specific HTTP request headers. An attacker could exploit this vulnerability by sending a malformed HTTP request to an...

Chadha Software Technologies PHPKB Standard Multi-Language Cross-Site Request Forgery Vulnerability (CNVD-2020-17156)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A cross-site request forgery vulnerability exists in Chadha Software Technologies PHPKB Standard Multi-Language. The vulnerability...