AlmaLinux 8 : gnupg2 (ALSA-2020:4490)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4490 advisory. - GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery CSRF vulnerability in dirmngr that can result in Attacker controlled CSRF, Informatio...

Mail.ru: "😂" + Unauthenticated Stored XSS in API at https://api.my.games/comments/v1/comments/update/

Crossite scripting in community.my.games via post comments due to incomplete fix for 848732 I have been working on this issue for 2 hours and over 300 fails. Finally, I could exploit with a very exotic XSS payload. Payload with an emoji a little trick: %F0%9F%98%82!--😂//=...

Mail.ru: tracker.my.com information disclosure via csrf bypass

CSRF vulnerability in tracker.my.com allowed attacker to invite himself as a project owner via crossite request...

Mail.ru: Account takeover via CORS misconfigutation on https://beta.delivery-club.ru

Insufficient check for request origin allowed crossite access to beta.delivery-club.ru...

Mail.ru: Stored XSS in api.icq.net

Crossite scripting in api.icq.net domain. icq.net is considered as a sandbox domain, it does not use HTTP authentication or cookies, but XSS could be used to facilitate phishing attack...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ZTE Callisto 821+ ADSL router security vulnerabilities

Crossite scripting, crossite request forgery...

owncloud multiple security vulnerabilities

Code execution, authentication bypass, information disclosure, crossite scripting, DoS...

EMC RSA Archer GRC multiple seucurity vulnerabilities

Restrictions bypass, crossite scripting, information disclosure...

Tenda routers crossite scripting

Crossite scripting in web interface...

Microsoft Lync Server / Skype for Business crossite scripting

Multiple crossite scripting possibilities...

Synology Download Station crossite scripting

Few crossite scripging possibilities...

EMC RSA Identity Management & Governance crossite scripting

No description provided...

Hawkeye-G XSS

Crossite scripting in web interface...

Linksys WAG120N crossite scripting

Crossite scripting in web interface...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Trend Micro Deep Discovery security vulnerabilities

Authentication bypass, crossite scripting...

System Center Operations Manager crossite scripting

Crossite scripting in web interface...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...