Cisco Web Security Appliance Management Interface < 11.8.0-332 Cross-Site Scripting Vulnerability XSS

According to its self-reported version, Cisco Web Security Appliance WSA is affected by a cross-site scripting XSS vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information TRUSTED...

CVE-2012-1001

Chyrp contains multiple XSS flaws identified as CVE-2012-1001. The vulnerabilities occur in Chyrp before 2.1.2 and before 2.5 Beta 2, enabling remote attackers to inject arbitrary scripts via the content parameter to includes/ajax.php or the body parameter to includes/error.php. The root cause is...

Blue Route blog system at***.php page has arbitrary file download vulnerability

Blue Route Blog System is built with PHP+MySQL. Blue Route blog system at.php page exists arbitrary file download vulnerability, an attacker can use the vulnerability to download arbitrary files...

The vulnerability of the faces/context/PartialViewContextImpl.java component in the Eclipse Mojarra library, which implements Mojarra JavaServer Faces and Eclipse EE4J specifications, allows attackers to perform cross-site scripting attacks.

The vulnerability of the faces/context/PartialViewContextImpl.java component in the Eclipse Mojarra library, as a implementation of Mojarra JavaServer Faces and Eclipse EE4J specifications, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerabili...

Cisco Web Security Appliance Unauthorized Device Reset Vulnerability

According to its self-reported version, Cisco Web Security Appliance WSA is affected by the following vulnerability: - A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an...

Code execution vulnerability in SeaCMS backend (CNVD-2019-45349)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A code execution vulnerability exists in the background of SeaCMS, which can be exploited by attackers to execute malicious code...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2020-31993)

The Cisco Web Security Appliance WSA is a web security appliance from Cisco USA. The appliance provides SaaS-based access control, real-time web reporting and tracking, and development of security policies. A cross-site scripting vulnerability exists in the Web management interface in versions...

fastferries.forth-crs.gr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1015257 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting fastferries.forth-crs.gr...

Magento Warns E-Commerce Sites to Upgrade ASAP to Prevent Attacks

The popular e-commerce platform Magento is urging web administrators to install its latest security update in order to defend against malicious attacks in the wild that could exploit a critical remote code-execution vulnerability. While the company didn’t specify what kinds of potential attacks...

CVE-2019-18926

CVE-2019-18926 affects Systematic IRIS Standards Management (ISM) v2.1 SP1 89. It is vulnerable to unauthenticated reflected XSS via a user input (dialog information) reflected in the page. The Red Hat/NVD entries confirm the same description. No explicit exploit details or remediation are provid...

SAP UI5 HTTP Handler CVE-2019-0388 Unspecified Content Spoofing Vulnerability

Description SAP UI5 HTTP Handler is prone to an unspecified content-spoofing vulnerability. Attackers can exploit this issue to manipulate and spoof content, which may aid in further attacks. Technologies Affected SAP SAPUI5 SAP UI 7.5 SAP UI 7.51 SAP UI 7.52 SAP UI 7.53 SAP UI 7.54 Recommendatio...

Bematech Printer MP-4200 Cross Site Scripting / Denial Of Service

Exploit Title: Bematech Printer MP-4200 - Denial of Service Date: 2019-11-11 Exploit Author: Jonatas Fil Vendor Homepage: https://www.bematech.com.br/ Software Link: https://www.bematech.com.br/produto/mp-4200-th/ Version: MP-4200 TH Tested on: Windows and Linux CVE : N/A DoS Poc:...

TYPO3 Authorization Issues Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An authorization issue vulnerability exists in TYPO3. An attacker could exploit this vulnerability to hijack a user session...

Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting

Exploit Title: Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/ Version:...

ngr.ucdavis.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1011738 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting ngr.ucdavis.edu website...

OWOX, Inc.: Reflected XSS

Hi team, I have found an XSS at https://bi.owox.com/ui/6177527534dc114eb07fa829e4ce4d28/dashboard/?trial=activated Because the input is not properly filtered, resulting in XSS being executed Vulnerable area: ----- 6177527534dc114eb07fa829e4ce4d28 The URL will now be:...

PHPEMS Online Practice Exam System suffers from XSS vulnerability

PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, support for a variety of types of questions and presentation, is the first to support the question of the question and hand automatic one of the scoring of the PHP online mock exam system. PHPEMS online mo...

Cisco Web Security Appliance AsyncOS Software Access Control Error Vulnerability

The Cisco Web Security Appliance WSA is a web security appliance from Cisco. The appliance provides SaaS-based access control, real-time web reporting and tracking, and security policy formulation.AsyncOS Software is the operating system used in it. AsyncOS Software is an operating system used in...

Vulnerability hunting with Semmle QL: DOM XSS

In two previous blog posts part 1 and part 2, we talked about using Semmle QL in C and C++ codebases to find vulnerabilities such as integer overflow, path traversal, and those leading to memory corruption. In this post, we will explore applying Semmle QL to web security by hunting for one of­­­...

Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface of an affected device. The vulnerability is due to insufficient validation of...