708 matches found
CM Pop-Up banners < 1.4.11 - Authenticated Stored XSS
When saving a new campaign, a user with editpages capabilities can store scripts in the campaign’s pop-up content. The code can then be executed on every page on the website. PoC A user with the editpages capability can store any script in the pop-up's content. The content is serialized and then...
WordPress CM Pop-Up banners plugin <= 1.4.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeroen Mulder in WordPress CM Pop-Up banners plugin versions = 1.4.10. Solution Update the WordPress CM Pop-Up banners plugin to the latest available version at least 1.4.11...
CM Pop-Up banners < 1.4.11 - Authenticated Stored XSS
When saving a new campaign, a user with editpages capabilities can store scripts in the campaign’s pop-up content. The code can then be executed on every page on the website. A user with the editpages capability can store any script in the pop-up's content. The content is serialized and then save...
Astak CM-818T3 Remote Configuration Disclosure
!/usr/bin/perl Astak CM-818T3 2.4GHz Wireless Security Surveillance Camera Remote Configuration Disclosure Copyright 2020 c Todor Donev https://donev.eu/ Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies,...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2016-9736)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2016-5983)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2017-1137)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2017-1583, CVE-2011-4343)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearQuest. Information about security vulnerabilities affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server which is used by IBM Rational ClearQuest (CVE-2019-10086)
Summary IBM WebSphere Application Server WAS is used by the IBM Rational ClearQuest server and web components. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
SQL injection vulnerability in the ci*** parameter of the cm***.php page of the 100 Vail Virtual Reality Cloud Platform for Vocational Education
100 Vail Vocational Education Virtual Reality Cloud Platform is a handheld skill learning platform for workplace competency development. There is a SQL injection vulnerability in the ci parameter of the cm.php page of the 100Vail Virtual Reality Cloud Platform for Vocational Education, which can ...
cm-coimbra.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1019788 Security Researcher PauloChoupina Helped patch 76 vulnerabilities Received 2 Coordinated Disclosure badges Received 8 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-coimbra.pt website a...
cm-azambuja.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1017994 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-azambuja.pt website an...
cm-gois.pt Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6855 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-gois.pt website and its users. Following coordinated...
ICSA-19-253-03_Siemens Industrial Products (Update P)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...
cm-oeiras.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-927723 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-oeiras.pt website a...
CVE-2017-9327
Secret data of processes managed by CM is not secured by file permissions...
SQL injection vulnerability in the backend cm***_fe***_an***.php file of VANOC enterprise website management system.
Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno enterprise website management system background cmfean.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
ABB 1SAP270000R0001 DC541-CM AC500 Digital I/O Module Detection
Binary data 756430.prm...