Fieldable Panels Panes - Moderately Critical - XSS - SA-CONTRIB-2016-025

This module enables you to create fieldable entities that have special integration with Panels. The module doesn't sufficiently filter the entity title or admin title fields when they are displayed in either the Panels admin UI or the In-Place Editor IPE, allowing for specially crafted XSS attack...

Komento 2.0.6, xss

We just released Komento 2.0.7 to address a security issue where a remote attacker may be able to launch an xss attack in prior versions of Komento. update notice: https://stackideas.com/blog/important-komento-2-0-7-security-fix...

IrIran Shopping Script 4.1 Cross Site Scripting

Exploit Title : IrIran Shoping Script Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iriran.net/eshopbuilder/ Google Dork : "Powered by: IRIran.net" Date: 2016/04/26 Category: Webapps Tested on: Win /php Version : 4.1 PoC: Search Box Vulnerable ...

New Relic: Open redirection

Hey To reproduce: go to https://login.newrelic.com/login?returnto=http:/example.com https://login.newrelic.com/login?returnto=http:///example.com https://login.newrelic.com/login?returnto=http:////example.com and login you will be redirected to http://example.com...

ManageEngine Desktop Central <= 9.1.099 Reflected XSS Vulnerability

ManageEngine Desktop Central is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

rockanddirt.com XSS vulnerability

Vulnerable URL: http://www.rockanddirt.com/search?method=search=truckdb=F==include=all=CHEVROLET=CHEVROLET==xfrom=2000to=2017==xmin=max=min=max===x===all&keyword1;==and&keyword2;=======50=1%22%3E%3Cscript%3Eprompt%28/OPENBUGBOUNTY/%29%3C/script%3E==Search+Now Details: Description| Value ---|---...

bubok.fr XSS vulnerability

Vulnerable URL: http://www.bubok.fr/rechercher/%3Cimg%20src=x%20onerror=alert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:13 GMT Vulnerability type:| XSS Vulnerability status:|...

MyBB 1.6.x / 1.8.x Tags Cross Site Scripting

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

Xero: stored xss issue in folder name on go.xero.com/Docs/Folders

A client-side validation bypass issue was reported, which allowed XSS characters to be used for naming folders in https://go.xero.com. This provided a XSS attack vector against users of an Organization. A malicious, authenticated insider within an organisation may have used this attack vector to...

FreeBSD : django -- multiple vulnerabilities (f9e6c0d1-e4cc-11e5-b2bd-002590263bf5)

Tim Graham reports : Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth User enumeration through timing difference on password hasher work factor upgrade %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

ATutor LMS - install_modules.php Cross-Site Request Forgery Remote Code Execution

ATutor LMS - installmodules.php Cross-Site Request Forgery Remote Code Execution / exp.js ATutor LMS " in it - You will need to set the Access-Control-Allow-Origin header to allow the target to pull zips - Use this with your favorite XSS attack - Student proof, aka bullet proof Timeline: 23/02/20...

victims.net XSS vulnerability

Vulnerable URL: http://victims.net/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 02.03.2016 Latest check for patch:| 02.03.2016 23:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Bumble: Password modification without knowing actual password & httpOnly bypass

Two issues: Session cookie is returned in HTML source code of /encounters page, which would allow an XSS attacker to steal it, even if httpOnly is activated. A secret value, present in HTML source code of some api.phtml pages, can be used to modify user's password without knowing actual one...

django -- multiple vulnerabilities

Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth User enumeration through timing difference on password hasher work factor upgrade...

WordPress < 3.3.2 Multiple Vulnerabilities

Binary data 9101.prm...

cdi.ensp.unl.pt XSS vulnerability

Vulnerable URL: http://www.cdi.ensp.unl.pt/docbweb/pesqres.asp?StartRec=0=ISBD=COMP==asc=35=%28%22awd%22%2B%22awd%22/%3E%3CscRiPt%3Eprompt/XSSPOSED/%3C/scRiPt%3E%24%22%29===1=advanced Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...

Mail.ru: VERY DANGEROUS XSS STORED inside emails

Hi guys, This bug is very dangerous you should fix it as fast as you can To reproduce: Attach xss.eml file to a message and send it when a user open the message the javascript will be executed and xss alert box will popup this bug affect tel.mail.ru , m.mail.ru and light.mail.ru but i couldn't...

MGASA-2016-0051 Updated phpmyadmin/phpseclib packages fix security vulnerability

Password suggestion functionality uses Math.random which does not provide cryptographically secure random numbers CVE-2016-1927. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full pa...

Updated phpmyadmin/phpseclib packages fix security vulnerability

Password suggestion functionality uses Math.random which does not provide cryptographically secure random numbers CVE-2016-1927. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full pa...

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of user-supplied input. An attacker could exploit this vulnerability by convincing...