17071 matches found
CVE-2019-3665
CVE-2019-3665 affects the web interface of McAfee Web Advisor (WA) for versions before 4.1.1.48. The issue is a code injection vulnerability that allows a remote unauthenticated attacker to cause the browser to render websites that WA would normally block when presented via a carefully crafted si...
Arbitrary File Deletion Vulnerability in Super Cms
Super CMS content management system hereinafter referred to as the product by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products , this product adopts an object-oriented approach to self-help research and development of...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted web page...
Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery
Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Date: 2019-11-06 Exploit Author: Joas Antonio Vendor Homepage: intelbras.com.br Software Link:...
SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery
Exploit Title: SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery Discovery by: LiquidWorm Date: 2019-12-02 Vendor Homepage: Tested Version: 6.5.33.17072501 CVE: N/A Advisory ID: ZSL-2019-5543 Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5543.php Carlo Gavazzi SmartHous...
Forma LMS 2.2.1 /appLms/ajax.server.php filter_cat and filter_status parameters SQL injections
Summary Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...
kocaeliolay.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1026681 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting kocaeliolay.com website a...
CVE-2019-13935
The CVE-2019-13935 issue affects Siemens Polarion webclient prior to version 19.2. It is a reflected XSS vulnerability caused by improper input validation in the web application, allowing execution of client-side code. Impact is limited to the browser context; no server-side compromise documented...
New Relic: Disclosure of locally served nerdpacks due to nr-local.net CORS policy misconfiguration
Hey team, I've discovered that webserver which serves NR1 nerdpacks locally after nr1 nerdpack:serve is executed allows cross-origin requests from every subdomain of nr-ext.net. Since the nr-ext.net domain is used as a sandbox for user-supplied apps, an attacker can place there a malicious code...
CVE-2019-15956
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...
CVE-2019-15956
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...
Authorization
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...
CVE-2019-15956
The CVE-2019-15956 entry concerns Cisco Web Security Appliance (WSA) AsyncOS Web Management Interface vulnerability. Connected sources confirm an authenticated, remote attacker can exploit improper authorization on a specific URL to perform an unauthorized device reset. The documented impacts inc...
CVE-2019-15956 Cisco Web Security Appliance Unauthorized Device Reset Vulnerability
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...
CVE-2019-15956 Cisco Web Security Appliance Unauthorized Device Reset Vulnerability
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...
WordPress wp-spell-check Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-spell-check is a spell-checking plugin used in it. A cross-site request forgery vulnerability exists in WordPress wp-spell-check...
telebras.com.br Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8547 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting telebras.com.br website and its users. Following coordinat...
astrovibe.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1023282 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting astrovibe.com website and...
cssfontstack.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1023154 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cssfontstack.com website a...