hoteldua.com.tw Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-911805 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hoteldua.com.tw website and i...

Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a cross-site request forgery CSRF, which exists in the web UI of the affected device. A remote attacker can exploit this to perform arbitrary actions with the privilege level of the affected user. Please see the included...

Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability

According to its self-reported version, Cisco Web Security Appliance WSA is affected by a denial of service vulnerability in the HTTPS decryption feature of WSA due to insufficient validation. An unauthenticated, remote attacker can exploit this, by installing a malformed certificate in a web...

Android Security Bulletin—July 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Cisco StarOS Denial of Service Vulnerability

According to its self-reported version, Cisco ASR 5000 Series Software is affected by a denial-of-service vulnerability. An unauthenticated, remote attacker can exploit this, via a series of specially crafted packets, to prevent the interface from receiving traffic. Please see the included Cisco...

Cisco Firepower Management Center 6.2.3.x < 6.2.3.10 / 6.3.0.x < 6.3.0.1 / 6.4.0 XSS (cisco-sa-20190206-fmc-xss)

According to its self-reported version, the Cisco Firepower Management Center is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to...

Open-Xchange (OX) AppSuite Improper Access Control Vulnerability (Bug ID 61315)

Open-Xchange OX AppSuite is prone to an improper access control vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cisco Expressway Gateway 11.5.1 Directory Traversal Vulnerability

Exploit for hardware platform in category web applications Cisco Expressway Gateway 11.5.1 Directory Traversal Vulnerability Details ======= Product: Cisco Expressway Gateway Affected Versions: 11.5.1, possibly others Fixed Versions: See Cisco Bug ID CSCvo47769 1 Vulnerability Type: Directory...

Cisco Firepower Threat Defense Security Bypass Vulnerability

According to its self-reported version, the Cisco Firepower Threat Defense Software is affected by a security bypass vulnerability. A flaw exists in the data acquisition component due to improperly handling system memory when inspecting traffic. An unauthenticated, remote attacker can exploit thi...

Android Security Bulletin—May 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Open-Xchange (OX) App Suite Access Control Vulnerability (Bug ID 61315)

Open-Xchange OX App Suite is prone to an access control vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Open-Xchange AppSuite 7.10.1 Information Disclosure / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 61771 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.10.1 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed Version: 7.6.3-rev44,...

Android Security Bulletin—April 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-04-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2018-13104

Open-Xchange OX App Suite is affected by a cross-site scripting vulnerability (CVE-2018-13104) in the frontend handling of mail attachments. The issue arises from attachment file names that can be used to inject script code, potentially enabling code execution in a victim’s browser (session hijac...

CVE-2019-1673

Cisco Identity Services Engine (ISE) web-based management interface is affected by an XSS vulnerability due to insufficient input validation in certain parameters. An authenticated, remote attacker could lure a user to click a crafted link, enabling execution of arbitrary script code in the inter...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some...

Cisco Firepower Management Center 6.2.2.2 / 6.2.3 XSS

Exploit Title: Cisco Firepower Management Center Cross-Site Scripting XSS Vulnerability Google Dork: N/A Date: 23-01-2019 Exploit Author: Bhushan B. Patil Exploit DB author ID: 9551 Advisory URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-frpwr-mc-xss...

Cisco Firepower Management Center 6.2.2.2 / 6.2.3 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Cisco Firepower Management Center Cross-Site Scripting XSS Vulnerability Exploit Author: Bhushan B. Patil Exploit DB author ID: 9551 Advisory URL:...

Cisco Firepower Management Center 6.2.2.2 / 6.2.3 - Cross-Site Scripting

Exploit Title: Cisco Firepower Management Center Cross-Site Scripting XSS Vulnerability Google Dork: N/A Date: 23-01-2019 Exploit Author: Bhushan B. Patil Advisory URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-frpwr-mc-xss Affected Version: 6.2.2.2 &...

Cisco Firepower Management Center 6.2.2.2 6.2.3 - Cross-Site Scripting

Cisco Firepower Management Center 6.2.2.2 6.2.3 - Cross-Site Scripting Exploit Title: Cisco Firepower Management Center Cross-Site Scripting XSS Vulnerability Google Dork: N/A Date: 23-01-2019 Exploit Author: Bhushan B. Patil Advisory URL:...