my-coat-of-arms.com XSS vulnerability

Open Bug Bounty ID: OBB-539685 Description| Value ---|--- Affected Website:| my-coat-of-arms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

(0Day) ZyXEL P-870H-51 DSL Router Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by...

PT-2018-1172

Name of the Vulnerable Software and Affected Versions ZyXEL P-870H-51 DSL Router version 1.00AWG.3D5 Description This issue allows remote attackers to cause a denial-of-service condition on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists...

szkandelous.com XSS vulnerability

Open Bug Bounty ID: OBB-537436 Description| Value ---|--- Affected Website:| szkandelous.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

briarwoodstore.com XSS vulnerability

Open Bug Bounty ID: OBB-537304 Description| Value ---|--- Affected Website:| briarwoodstore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plantoddities.com XSS vulnerability

Open Bug Bounty ID: OBB-537300 Description| Value ---|--- Affected Website:| plantoddities.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

desertthread.com XSS vulnerability

Open Bug Bounty ID: OBB-537295 Description| Value ---|--- Affected Website:| desertthread.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Master IP CAM 01 Vulnerabilities

Some time ago I analized this ipcam with my friend Dzonerzy: var serialNum="VVVIPCSBC150617Z-06929VjmJH54vkK"; var model="RTIPC"; var hardVersion="5900-gc1004"; var softVersion="V3.3.4.2103-S50-SBC-B20150721E"; var ipcname="WIFICAM"; var startdate="2017-8-5 0:0:2"; var runtimes="0 day, 0:54"; var...

PT-2018-6636

Name of the Vulnerable Software and Affected Versions: Dasan GPON ONT WiFi Router H640X versions 12.02-01121 2.77p1-1124 through 3.03p2-1146 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a long POST request to the "login action" function in the...

CVE-2017-18046: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the loginaction function in /cgi-bin/loginaction.cgi aka cgipage.cgi...

Mailman -- Cross-site scripting (XSS) vulnerability in the web UI

Mark Sapiro reports: An XSS vulnerability in the user options CGI could allow a crafted URL to execute arbitrary javascript in a user's browser. A related issue could expose information on a user's options page without requiring login...

borealis.gi XSS vulnerability

Open Bug Bounty ID: OBB-530805 Description| Value ---|--- Affected Website:| borealis.gi Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

wordsleuth.ss.uci.edu XSS vulnerability

Open Bug Bounty ID: OBB-528274 Description| Value ---|--- Affected Website:| wordsleuth.ss.uci.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

slapper.apam.columbia.edu XSS vulnerability

Open Bug Bounty ID: OBB-528266 Description| Value ---|--- Affected Website:| slapper.apam.columbia.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vega.lpl.arizona.edu XSS vulnerability

Open Bug Bounty ID: OBB-528272 Description| Value ---|--- Affected Website:| vega.lpl.arizona.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Master IP CAM 01 Hardcoded Password / Unauthenticated Access

Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CVE: CVE-2018-5723, CVE-2018-5724,...

CVE-2018-5728

CVE-2018-5728 concerns Cobham Sea Tel 121 build 222701 devices. A remote attacker can disclose potentially sensitive information by sending a request to /cgi-bin/getSysStatus, exposing ship latitude/longitude and satellite details. The vulnerability is described as an information disclosure issue...

CVE-2017-17947

A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure PCS before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure PPS before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL...

PT-2018-17114

Name of the Vulnerable Software and Affected Versions: Cobham Sea Tel 121 build 222701 Description: The issue allows remote attackers to obtain potentially sensitive information via a "cgi-bin/getSysStatus" API endpoint. This can include details such as the Latitude/Longitude of the ship or...

CVE-2018-5728: Exposure of Sensitive Information to an Unauthorized Actor

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship, or satellite details...