Cross site scripting

A vulnerability in the web application interface of the Cisco Identity Services Engine ISE portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvd49141. Known...

Cross site scripting

A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.51...

Cross site scripting

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. Known Fixed Releases: 6.2...

cocopsych.org XSS vulnerability

Vulnerable URL: http://www.cocopsych.org/index.php?Target=practice=search.php=1"...

ferien-miete.de XSS vulnerability

Vulnerable URL:...

berkshireveneer.com XSS vulnerability

Vulnerable URL: http://www.berkshireveneer.com/flitchlist.php?sliceid=1/-///'/"//--...

Rockstar Games: flash injection in http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf

In this report, the researcher found a vulnerability in one of our Flash players http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf that allowed loading of external .swf files. This in turn allowed the researcher to perform a XSS attack...

CVE-2015-9056

Kibana is the affected product in multiple sources (NVD, RH, OpenVAS, CNVD) for CVE-2015-9056. The vulnerability is a Cross-Site Scripting (XSS) flaw present in Kibana versions prior to 4.1.3 and 4.2.1. The provided documents consistently describe an XSS issue but do not specify the underlying ro...

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

A redirect flaw, where the issafeurl function did not correctly sanitize numeric-URL user input, was found in python-django. A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard...

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

A redirect flaw, where the issafeurl function did not correctly sanitize numeric-URL user input, was found in python-django. A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard...

Cross site scripting

A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.10.176...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

Cross site scripting

Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file...

CVE-2017-9516

Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file...

CVE-2017-9516

CVE-2017-9516 describes a cross-site scripting (XSS) vulnerability in Craft CMS prior to version 2.6.2982. The issue arises when a malicious SVG file is uploaded, enabling an attacker to inject or execute arbitrary scripts in the context of the affected site. The available connected documents cor...

Cisco Content Security Management Appliance Message Tracking Cross-Site Scripting Vulnerability (cisco-sa-20170607-esa)

A vulnerability in the web-based management interface of Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. SPDX-FileCopyrightText:...

Craft CMS 2.6 Cross Site Scripting / File Upload

Exploit Title: Craft CMS 2.6 - Cross-Site Scripting/Unrestricted File Upload Date: 2017-06-08 Exploit Author: Ahsan Tahir Vendor Homepage: https://craftcms.com Software Link: http://download.craftcdn.com/craft/2.6/2.6.2981/Craft-2.6.2981.zip Version: 2.6 Tested on: Kali Linux 2.0 | Windows 8.1...

CVE-2016-0781

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions prior to 1.6.20 are vulnerable to an XSS attack by specifying malicious java script content in eith...

gdmeheco.com XSS vulnerability

Vulnerable URL: http://www.gdmeheco.com/en/search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timelin...

pcworld.ie XSS vulnerability

Vulnerable URL: http://www.pcworld.ie/Images/PCWorld/flash/mediaPlayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check...