17069 matches found
nvlinens.com Cross Site Scripting vulnerability
Security Researcher error404 Helped patch 522 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting nvlinens.com website and its users. Following coordinated...
umweltdigital.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1052790 Security Researcher howardpotts Helped patch 172 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting umweltdigital.de website and its users. Following...
AVE DOMINAplus 1.10.x Cross Site Request Forgery / Cross Site Scripting
AVE DOMINAplus =1.10.x CSRF/XSS Vulnerabilities Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 - 1.10.3...
xzagorov.webzdarma.cz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1051994 Security Researcher Fadavvi Helped patch 80 vulnerabilities Received 4 Coordinated Disclosure badges Received 1 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting xzagorov.webzdarma.cz website...
CVE-2019-6018
NetCommons3.x (NetCommons 3.2.2 and earlier) is affected by a cross-site scripting (XSS) vulnerability (CWE-79). The issue arises from insufficient validation of client data in the web application, allowing an attacker to inject arbitrary script/HTML into users’ browsers. Affected versions includ...
CVE-2019-6011
CVE-2019-6011 is a confirmed cross-site scripting vulnerability in the WordPress plugin wpDataTables Lite, affecting version 2.0.11 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially impacting users who load affected pages. T...
25400021084.amanbo.co.ke Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1051715 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
rabakehair.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1048272 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
australianinvestor.com.au Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting australianinvestor.com.au website and its users. Followin...
U.S. Dept Of Defense: Leaked DB credentials on https://██████████.mil/███
Summary: Information disclosure with login credentials for ms-sql database exposed. Description: I've found a PHP info file disclosed on https://█████.mil/██████ containing login credentials for a database cloud server ███████ as well as information on the host system such as hostname, username a...
Backdrop CMS Cross-Site Scripting Vulnerability (CNVD-2020-03710)
Backdrop CMS is a simple, open source, easy-to-use lightweight content management system for building attractive, professional websites. A cross-site scripting vulnerability exists in Backdrop CMS. The vulnerability stems from Backdrop CMS failing to adequately filter output when displaying...
Arbitrary File Deletion Vulnerability in Ocean CMS Backend
Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. Ocean CMS backend there are arbitrary file deletion vulnerability, attackers can use the vulnerability to delete any file...
CVE-2019-8813
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting...
CVE-2019-8769
An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...
africalegalnetwork.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1041154 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
hgdistribution.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1041086 Security Researcher error404 Helped patch 526 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hgdistribution.com website...
SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition)
Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition suffers from a SQL injection bypass vulnerability. Attackers use the vulnerability to bypa...
Webshell Bypass Vulnerability in Web Security Dog APACHE Edition ( CNVD-2020-04315)
Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...
CVE-2013-5978
CVE-2013-5978 : In the WordPress Cart66 Lite plugin (affected version: before 1.5.1.15), multiple XSS vulnerabilities exist in the products.php functionality. Remote attackers can inject arbitrary web script or HTML via the 1) Product name or 2) Price description fields in requests to wp-admin/ad...
Webshell Bypass Vulnerability in Web Security Dog APACHE Version 4.0
Security Dog provides users with lightweight, efficient, reliable and stable cloud security products and a full range of security services. A webshell bypass vulnerability exists in APACHE version 4.0 of Website Security Dog, which can be exploited by attackers to gain access to the control...