WakaTime: UI Redressing on Embedded Charts

Hi Team, Wanna report you that Embedded Charts part is missing X-Frame-Options header hence vulnerable to clickjacking vulnerability. PoC: Just login to your account and open below html page you can see how simply victim can be clickjacked. Click You've been clickjacked! iframe id="parentFrame"...

nauticalcharts.noaa.gov XSS vulnerability

Vulnerable URL: https://www.nauticalcharts.noaa.gov/nsd/searchbychart.php?chart=1"...

nauticalcharts.noaa.gov XSS vulnerability

Vulnerable URL: https://www.nauticalcharts.noaa.gov/nsd/coastpilotw.php?book=1/-///'/"//--...

gamesonly.at XSS vulnerability

Vulnerable URL: https://www.gamesonly.at/index.asp?suchstring=add=id=13=Charts=1/-///'/"//--...

Faraday v2.5 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...

Real Time Performance Monitoring: netdata

Real Time Performance Monitoring Netdata is a daemon that collects data in realtime per second and presents a web site to view and analyze them. The presentation is also real-time and full of interactive charts that precisely render all collected values. netdata is the fastest way to visualize...

Wordpress tera-charts plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up a personal blog site . tera-charts is one of the plug-ins used to drag and drop charts in the Excel file . A cross-site scripting...

CVE-2016-1000151

Reflected XSS in wordpress plugin tera-charts v1.0...

CVE-2016-1000151

Reflected XSS in wordpress plugin tera-charts v1.0...

Cross site scripting

Reflected XSS in wordpress plugin tera-charts v1.0...

CVE-2016-1000151

CVE-2016-1000151: Reflected XSS in WordPress tera-charts plugin v1.0. The vulnerability is described across multiple sources as an unauthenticated XSS via input handling (e.g., treemap.php?fn=...), allowing script/HTML injection. Exploitation is reported as unauthenticated in the sources; CVSS me...

CVE-2016-1000151

Reflected XSS in wordpress plugin tera-charts v1.0...

DEBIAN-CVE-2016-5733

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

CVE-2016-5733

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)

The tera-charts WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. http://www.example.com/tera-charts/charts/treemap.php?fn=";alert1;"&userid=1...

WordPress Tera Charts Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)

The tera-charts WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/tera-charts/charts/treemap.php?fn=";alert1;...

nv charts - External URLs, MIT license, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application nv charts published at the 'play' market has multiple vulnerabilities...

Schlager Charts - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Schlager Charts published at the 'play' market has multiple vulnerabilities...