cm-caminha.pt XSS vulnerability

Open Bug Bounty ID: OBB-262152 Description| Value ---|--- Affected Website:| cm-caminha.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-oaz.pt XSS vulnerability

Vulnerable URL: https://www.cm-oaz.pt/?op=search=%27%22--%21%3E%3Cimg+src%3Dx+onerror%3Dalert%28%22openbugbounty%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1189466 VIP...

cm-loures.pt XSS vulnerability

Vulnerable URL: http://www.cm-loures.pt/Pesquisa.aspx?DisplayId=1=%22%3E%3Csvg%2fonload%3dprompt%28%2fOPENBUGBOUNTY%2f%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.05.2017 Latest check for patch:| 31.05.2017 13:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cm-serpa.pt XSS vulnerability

Vulnerable URL: http://www.cm-serpa.pt/pesquisa.asp?pesquisar=1%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E&input.x;=0&input.y;=0=frase Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

cm-amares.pt XSS vulnerability

Vulnerable URL: http://www.cm-amares.pt/pesquisa Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4723409 VIP website status:| No Check cm-amares.pt SSL connection:| Grade: F...

CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

CM Browser - Fast & Light - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CM Browser - Fast & Light published at the 'play' market has multiple vulnerabilities...

WordPress CM Download Manager Code Injection (CVE-2014-8877)

Content Management Download Manager for WordPress is prone to remote PHP-code execution vulnerability because it fails to validate user input. An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server. This may aid in further attacks or lead to a full...

cm-vilareal.pt XSS vulnerability

Vulnerable URL: http://www.cm-vilareal.pt/index.php/cidadao/aerodromo/%22%20onmousemove=prompt%22OPENBUGBOUNTY%22%20%22 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Mitsubishi LJ71E71-100-CM Communication Module Web Services Buffer Overflow Vulnerability

Mitsubishi L06 is a high-end PLC of Mitsubishi, its Ethernet communication module LJ71E71-100-CM is open to web service, support http protocol communication, you can access and set the configuration information of the device by logging into the web server. In the HTTP message sent to the...

CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability

Document Title: =============== CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1856 Release Date: ============= 2016-06-13 Vulnerability Laboratory ID VL-ID: ====================================...

CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability

Document Title: =============== CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1856 Release Date: ============= 2016-06-12 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress CM Ad Changer 1.7.7 Cross Site Scripting

Exploit Title: CM Ad Changer Plugin XSS Date: 9/6/2016 Exploit Author: Aaditya Purani Author Homepage: https://aadityapurani.com Vendor Homepage: https://ad-changer.cminds.com Software Link: https://downloads.wordpress.org/plugins/cm-ad-changer.zip Updated Version: 1.7.7 Tested on: Wordpress 4.5....

CM Ad Changer <= 1.7.7 - Stored Cross-Site Scripting (XSS)

An Stored Cross Site Scripting was reported by the author to CM Ad Plugins under which an unprivileged user can trigger a Stored XSS to perform malicious actions or any attacker could send a crafted link CSRF which can trigger the Stored XSS. PoC 1 Go to CM Ad changers - Campaigns 2 Create a...

CM Ad Changer <= 1.7.7 - Stored Cross-Site Scripting (XSS)

An Stored Cross Site Scripting was reported by the author to CM Ad Plugins under which an unprivileged user can trigger a Stored XSS to perform malicious actions or any attacker could send a crafted link CSRF which can trigger the Stored XSS. 1 Go to CM Ad changers - Campaigns 2 Create a Campaign...

The vulnerability of the Linux operating system’s kernel allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the drivers/infiniband/hw/cxgb3/iwchcm.c component in Linux kernels is related to incorrect definition of error conditions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service denial-of-service attack by using specially crafte...

DEBIAN-CVE-2015-8812

drivers/infiniband/hw/cxgb3/iwchcm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via crafted packets...

WordPress CM Ad Changer 1.7.2 Cross Site Scripting

FULL DISCLOSURE Product : cm-ad-changer Exploit Author : Rahul Pratap Singh Version :1.7.2 Home page Link : https://wordpress.org/plugins/cm-ad-changer/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerability:...

CM Ad Changer <= 1.7.2 - Cross-Site Scripting (XSS)

The CM Ad Changer WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CM Locker (Secure & Boost ) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CM Locker Secure & Boost published at the 'play' market has multiple vulnerabilities...