Cross site request forgery (csrf)

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request...

CVE-2017-6026

Affected products: Schneider Electric Modicon PLCs (M241 and M251) with firmware versions prior to 4.0.5.11. Root cause / vulnerability: Use of insufficiently random values in session numbers generated by the web application, leading to potential session compromise due to shared session identifie...

CVE-2017-6038

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request...

The likelihood of collaborative oa \app\team\block\control.php SQL injection

No description provided by source...

web.jns.ac.in XSS vulnerability

Vulnerable URL: http://web.jns.ac.in/login.asp?corner=1"...

secrestwardle.com XSS vulnerability

Vulnerable URL: http://www.secrestwardle.com/viewprofessional.php?practiceid=1"...

db.continentalcaststone.com XSS vulnerability

Vulnerable URL: http://db.continentalcaststone.com/Security/Login.asp?silent===/main.asp=1"...

Fixed Session Vulnerability in Sierra Wireless GX440

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless GX440 devices using version 4.3.2 of the ALEOS firmware. An attacker could exploit the vulnerability to access the management web application...

WordPress Ultimate Product Catalogue 4.2.2 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/ultimate-product-catalogue/ Software Link:...

GLPI 0.90.4 SQLi Vulnerability

GLPI is prone to an SQL injection SQLi vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:glpi-project:glpi"; if...

ryeharbour.net XSS vulnerability

Vulnerable URL: http://www.ryeharbour.net/myalbum.asp?less=1=1/-///'/"//--...

jinnaite.com XSS vulnerability

Open Bug Bounty ID: OBB-253128 Description| Value ---|--- Affected Website:| jinnaite.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security feature bypass

The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an...

Multiple IP-Cameras Directory Traversal Vulnerability

The IP-Camera is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Prime Collaboration Provisioning Arbitrary File Download Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A security vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool allows an unauthenticated, remote attacker to download arbitrary files and read files within the...

Dolibarr < 5.0.4 RCE Vulnerability

Dolibarr allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

vmmoneytransfer.com XSS vulnerability

Vulnerable URL: https://www.vmmoneytransfer.com/US/login.asp?which=1/-///'/"//--...

infax.com XSS vulnerability

Vulnerable URL: http://www.infax.com/webfids/PBI/webfids/fids.asp?flightType=A=1/-///'/"//--...

webapps.rrc.state.tx.us XSS vulnerability

Vulnerable URL: http://webapps.rrc.state.tx.us/DP/drillDownQueryAction.do?fromPublicQuery=Y=55=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability...

VTScada < 11.2.26 Multiple Vulnerabilities

VTScada is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:trihedral:vtscada"; if description...