iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection Google Dork: N/A Date: 2018-09-27 Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor...

Information Builders WebFOCUS Business Intelligence Portal Command Injection Vulnerability

Information Builders WebFOCUS Business Intelligence Portal is a Business Intelligence Portal system from Information Builders USA. A command injection vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal version 8.1, which can be exploited by sending a specially...

CVE-2016-9044

An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 . A specially crafted web parameter can cause a command injection. An authenticated attacker can send a crafted web request to trigger this vulnerability...

Command injection

An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 . A specially crafted web parameter can cause a command injection. An authenticated attacker can send a crafted web request to trigger this vulnerability...

CVE-2016-9044

CVE-2016-9044 is confirmed in Information Builders WebFOCUS Business Intelligence Portal version 8.1. A command injection vulnerability exists when a specially crafted web parameter is processed, allowing an authenticated attacker to trigger arbitrary commands via a crafted web request. Multiple ...

CVE-2016-9044: Improper Neutralization of Special Elements used in a Command

An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 . A specially crafted web parameter can cause a command injection. An authenticated attacker can send a crafted web request to trigger this vulnerability...

Zhengzhou Kintechnology Co., Ltd. website building system has SQL injection vulnerabilities

Zhengzhou Prime Technology Co., Ltd. specializes in providing customers with online business solutions in the field of information technology. Zhengzhou DynaSky Culture Communication Co., Ltd. website construction system has a SQL injection vulnerability, which can be exploited by attackers to...

DEBIAN-CVE-2018-5095

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...

builders-hardware.com XSS vulnerability

Open Bug Bounty ID: OBB-627096 Description| Value ---|--- Affected Website:| builders-hardware.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Knight Network Builders has a SQL Injection Vulnerability

Ltd. is a website design company with website construction and visual design development and brand online marketing promotion. Knight Network website builder has a SQL injection vulnerability. An attacker can use this vulnerability to obtain sensitive information in the database and can upload...

texascustombuildersguild.com XSS vulnerability

Open Bug Bounty ID: OBB-526216 Description| Value ---|--- Affected Website:| texascustombuildersguild.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

builders-hardware.com XSS vulnerability

Open Bug Bounty ID: OBB-454758 Description| Value ---|--- Affected Website:| builders-hardware.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

insurancelinkdirect.com XSS vulnerability

Open Bug Bounty ID: OBB-250049 Description| Value ---|--- Affected Website:| insurancelinkdirect.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL injection vulnerability in Ruian Uber Technology website cms

Ruian UberTech Builders CMS is a secure and powerful Flash website management system based on PHP MYSQL. SQL injection vulnerability exists in Ruian UberTech website builder cms. An attacker can exploit this vulnerability to gain access to sensitive database information...

melbournecustombuilders.com.au XSS vulnerability

Vulnerable URL: http://melbournecustombuilders.com.au/phone.php?phone=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

perthcustombuilders.com.au XSS vulnerability

Vulnerable URL: http://perthcustombuilders.com.au/phone.php?phone=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Threat Outbreak Alert RuleID29107: Email Messages Distributing Malicious Software on May 12, 2017

Medium Alert ID: 53821 First Published: 2017 May 12 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29107 may contain the following files: Name | Size...

amar-builders.com XSS vulnerability

Open Bug Bounty ID: OBB-224854 Description| Value ---|--- Affected Website:| amar-builders.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

longwoodbuilders.com XSS vulnerability

Vulnerable URL: http://longwoodbuilders.com/register.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10243502 Google Pagerank...

dashbuilder: XXE/SSRF vulnerability

A flaw was found in the dashbuilder import facility: the DocumentBuilders instantiated in org.jboss.dashboard.export.ImportManagerImpl did not disable external entities. This could allow an attacker to perform a variety of XML External Entity XXE and Server-Side Request Forgery SSRF attacks...