bp-online.com XSS vulnerability

Open Bug Bounty ID: OBB-581711 Description| Value ---|--- Affected Website:| bp-online.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress: [BuddyPress 2.9.1] Open Redirect via "wp_http_referer" parameter on "bp-profile-edit" endpoint

Hi, In a similar manner to 228569, it is currently possible to execute authenticated open redirections via the wphttpreferer parameter used in the BuddyPress extended user edit screen. Proof of concept Upon accessing the below URL, please select the "Update Profile" button, then select the "←Back...

PT-2017-13803

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue is related to a cross-site scripting XSS vulnerability in the EyesOfNetwork web interface. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the bp...

OpenJPEG - mqc.c Heap Buffer Overflow

OpenJPEG - mqc.c Heap Buffer Overflow DESCRIPTION An Out-of-Bounds Write issue can be occurred in function opjmqcbyteout of mqc.c during executing opjcompress. This issue was caused by a malformed BMP file. CREDIT This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. TESTED VERSION...

fotiu-bp.sulinet.hu XSS vulnerability

Vulnerable URL: http://www.fotiu-bp.sulinet.hu/files/archivum/2007-2008/index.php?option=comsearch=99999999=a%20keresett%20sz%C3%B3...=any"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //=newest=15=130 Details: Description| Value ---|--- Patched:| No...

PT-2017-17586

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server affected versions not specified Description The issue is related to inadequate protection against SQL injection, allowing remote authenticated users to execute arbitrary code with super-user privileges. This...

WordPress BP Group Documents plugin <= 1.10 Authenticated Document Modification vulnerability

WordPress BP Group Documents plugin Authenticated Document Modification vulnerability exists in the function dopostlogic, in the file /include/templatetags.php. If user has a capability to edit one document, he also can edit all other documents. Solution Update the plugin...

Ubuntu 16.10 : linux, linux-raspi2 vulnerabilities (USN-3209-1)

It was discovered that the generic SCSI block layer in the Linux kernel did not properly restrict write operations in certain situations. A local attacker could use this to cause a denial of service system crash or possibly gain administrative privileges. CVE-2016-10088 Jim Mattson discovered tha...

CVE-2016-9588

arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the BP and OF exceptions, which allows guest OS users to cause a denial of service guest OS crash by declining to handle an exception thrown by an L2 guest...

BP Profile Search <= 4.5.3 - PHP Object Injection

The plugin bp-profile-search insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. This vulnerability was patched in version 4.6, information is being released now as a disclosure period has expired...

WordPress BP Profile Search Plugin <= 4.5.3 - PHP Object Injection

This plugin is prone to a PHP object injection vulnerability. Solution Update the plugin...

SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability

SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...

PT-2015-7488

Name of the Vulnerable Software and Affected Versions SAP NetWeaver J2EE Engine version 7.40 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the BP FIND JOBS WITH PROGRAM function module. Recommendations For SAP...

WordPress BP Gallery Plugin <= 1.2.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

WordPress BP Gallery Plugin <= 1.2.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

bp-gallery 1.2.5 - Cross Site Scripting

The bp-gallery WordPress plugin was affected by a Cross Site Scripting security vulnerability...

BP Blog 6.0/7.0/8.0/9.0 - Remote Database Disclosure Vulnerability

No description provided by source. BP Blog V6.0 & V7.0 & V8.0 & V9.0 Database Disclosure Vulnerability I BP Blog V6.0 & V7.0 & V8.0 & V9.0 I Script Website : http://blog.betaparticle.com/ I Found by : Dxil I Contact : [email protected] D powered by BP Blog 7.0 or powered by BP Blog 8.0 E...

Wordpress BP Group Documents Plugin 1.2.1 - Multiple Vulnerabilities

No description provided by source...

GNUpanel 0.3.5_R4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title :GNUpanel 0.3.5R4 - Multiple Vulnerabilities Vendor Homepage :http://wp.geeklab.com.ar/gl-en/gnupanel/ GNUPanel Version :0.3.5R4 Server :Centos 6.4 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com http://www.grisapka.org Discovery date :03/11/2014 CVE :N/A...

Wordpress BP Group Documents Plugin 1.2.1 - Multiple Vulnerabilities

Stored XSS vulnerability in BP Group Documents 1.2.1 Description ================ Stored XSS vulnerability in BP Group Documents 1.2.1 Vulnerability ================ “Display name” and “Description” fields are not escaped, meaning any tags including script tags can be stored in them. Proof of...