7838 matches found
PT-2020-14489
Name of the Vulnerable Software and Affected Versions We-com Municipality portal CMS versions 2.1.x Description SQL injection can occur via the cerca/ keywords field. This issue allows for potential data manipulation and unauthorized access. Recommendations For We-com Municipality portal CMS...
CVE-2020-15540: Improper Neutralization of Special Elements used in an SQL Command
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...
PT-2020-14488
Name of the Vulnerable Software and Affected Versions We-com Municipality portal CMS versions 2.1.x Description The issue allows for XSS to occur via the cerca/search bar. Recommendations For We-com Municipality portal CMS versions 2.1.x, consider restricting access to the cerca/search bar until ...
PT-2020-14490
Name of the Vulnerable Software and Affected Versions We-com OpenData CMS version 2.0 Description The issue allows SQL Injection via the username field on the administrator login page. This could potentially lead to unauthorized access to sensitive data. Recommendations For We-com OpenData CMS...
CVE-2020-15539: Improper Neutralization of Special Elements used in an SQL Command
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...
CVE-2020-15538: Improper Neutralization of Input During Web Page Generation
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...
testlink.wso2.com Cross Site Scripting vulnerability OBB-1216120
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
audiv8.com Cross Site Scripting vulnerability OBB-1215576
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
gao800.com Cross Site Scripting vulnerability OBB-1214724
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fitnessondemand247.com Cross Site Scripting vulnerability OBB-1214056
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
yqg5.com Cross Site Scripting vulnerability OBB-1213305
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sgct88.com Cross Site Scripting vulnerability OBB-1213267
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jingdian365.com Cross Site Scripting vulnerability OBB-1213233
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
UsoDllLoader - Windows - Weaponizing Privileged File Writes With The Update Session Orchestrator Service
2020-06-06 Update: this trick no longer works on the latest builds of Windows 10 Insider Preview. This means that, although it still works on the mainstream version ofWindows 10, you should expect it to be patched in the coming months. Description This PoC shows a technique that can be used to...
support.wso2.com Cross Site Scripting vulnerability OBB-1212378
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
how01.com Cross Site Scripting vulnerability OBB-1211965
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-22252
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as dotnet parse tilde 2, dotnet parse tilde, and dotnet parse...
demenageur1.com Cross Site Scripting vulnerability OBB-1211813
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
health6.com Cross Site Scripting vulnerability OBB-1211745
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
tracer360.com Cross Site Scripting vulnerability OBB-1211372
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...