17069 matches found
hibernate-validator: safeHTML validator allows XSS
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10172)
ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
mycomp.ch Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1083811 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting mycomp.ch website and it...
The vulnerability of the API Framework web server component of Cisco Web Security Appliance (WSA) and the Cisco Content Security Management Appliance (SMA) security management device allows a perpetrator to inject arbitrary HTTP headers into responses.
The vulnerability of the API Framework web server component of Cisco Web Security Appliance WSA and the Cisco Content Security Management Appliance SMA security management device is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious...
jewe.be Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1082461 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting jewe.be website and its user...
CVE-2014-2843
CVE-2014-2843 is a reflected XSS vulnerability in infoware MapSuite MapAPI. Affected versions are MapAPI before 1.0.36 (and 1.1.x before 1.1.49). Fixed releases are MapAPI 1.0.36 and 1.1.49. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ...
madcowmodels.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1080010 Security Researcher kun-fly Helped patch 790 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting madcowmodels.com website an...
its.technarts.com Cross Site Scripting vulnerability
Security Researcher rahulvi93723664 Helped patch 20 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting its.technarts.com website and its users. Following coordinated and responsible...
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) Information Disclosure Vulnerability (1122250)
According to its self-reported version, the instance of Trend Micro InterScan Web Security Virtual Appliance is affected by an information disclosure vulnerability in its web console component. An authenticated, remote attacker can exploit this, to disclose credentials of the web console...
pollbob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1078088 Security Researcher Hackerclaus Helped patch 69 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting pollbob.com website and i...
puls000.ru Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting puls000.ru website and its users. Following coordinated an...
nixj.net Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting nixj.net website and its users. Following coordinated and...
railtex.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1076795 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)
Adive Framework 2.0.8 - Cross-Site Request Forgery Change Admin Password Exploit Title: Adive Framework 2.0.8 - Cross-Site Request Forgery Change Admin Password Exploit Author: Sarthak Saini Date: 2020-01-18 Vendor Link : https://www.adive.es/ Software Link:...
CVE-2013-4770
The CVE-2013-4770 entry corresponds to a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x, with exploitation possible before 4.0.1. The affected product is EMC within Eucalyptus 4.0.x line; the vulnerability allows remote attackers to inject arbitrary web scri...
consoletradein.co.uk Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting consoletradein.co.uk website and its users. Following...
enahost.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting enahost.com website and its users. Following coordinated a...
Security Bulletin: Overly Permissive CORS Policy vulnerability found on IBM Security Secret Server (CVE-2019-4633)
Summary This security bulletin describes plugging some potential, minor yet significant, information leaks by the IBM Security Secret Server. IBM Security Secret Server has an overly permissive CORS policy for login. Vulnerability Details CVEID: CVE-2019-4633 DESCRIPTION: IBM Security Secret Serv...
OLK Web Store 2020 - Cross-Site Request Forgery
Exploit Title: OLK Web Store 2020 - Cross-Site Request Forgery Google Dork: intext:"TopManage ® 2002 - 2020" Date: 2020-01-13 Exploit Author: Joel Aviad Ossi Vendor Homepage: http://www.topmanage.com/ Software Link: http://www.topmanage.com/microsites/olk-web-store/ Version: 2020 Tested on: N/A C...
