Cross site scripting

Adive Framework 2.0.8 has admin/user/add userName XSS...

Cross site scripting

Adive Framework 2.0.8 has admin/user/add userUsername XSS...

CVE-2020-7989

Adive Framework 2.0.8 has admin/user/add userUsername XSS...

CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS...

CVE-2020-7989

Adive Framework 2.0.8 has admin/user/add userUsername XSS...

CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS...

CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS...

PT-2020-19902

Name of the Vulnerable Software and Affected Versions Adive Framework version 2.0.8 Description The issue concerns an XSS vulnerability related to the userName variable in the admin/user/add endpoint. This allows for potential exploitation. Recommendations For Adive Framework version 2.0.8,...

CVE-2020-7989: Improper Neutralization of Input During Web Page Generation

Adive Framework 2.0.8 has admin/user/add userUsername XSS...

CVE-2020-7990: Improper Neutralization of Input During Web Page Generation

Adive Framework 2.0.8 has admin/user/add userName XSS...

PT-2020-19901

Name of the Vulnerable Software and Affected Versions Adive Framework version 2.0.8 Description The issue concerns an XSS vulnerability in the userUsername parameter of the admin/user/add endpoint. This allows for potential exploitation. Recommendations For Adive Framework version 2.0.8, as a...

Adive Framework 2.0.8 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Author: Sarthak Saini Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8 Category: Webapps Tested on:...

Adive Framework 2.0.8 - Persistent Cross-Site Scripting

Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Author: Sarthak Saini Dork: N/A Date: 2020-01-18 Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8...

Adive Framework 2.0.8 - Persistent Cross-Site Scripting

Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Author: Sarthak Saini Dork: N/A Date: 2020-01-18 Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8 Category: Webapps Tested on: windows64bit / mozila firefo...

SSRF when adding Jira server in admin plugin

h2. Please be aware that Atlassian does not consider this issue to represent a security risk as the functionality is restricted to users with administrative rights. h3. Issue Summary When adding a Jira server in Bamboo under the "User directories" module, an attacker can put any value in the...

CVE-2019-12398

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected...

CVE-2019-12398: Improper Neutralization of Input During Web Page Generation

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected...

CVE-2020-6949

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account...

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Hos...