Spotweb-Develop 1.4.9 Cross Site Scripting

Exploit Title: Cross Site Scripting DOM Based spotweb-develop 1.4.9 Author: @nu11secur1ty Testing and Debugging: nu11secur1ty $ OWASP-ZAP Date: 05.20.2021 Vendor: https://www.nzbserver.com/ Link: https://github.com/spotweb/spotweb CVE: 2021-XXXX Proof: https://streamable.com/hix5o1 + Exploit...

voices.iit.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1153906 Security Researcher r4v550n Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting voices.iit.edu website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

whitesellco.com XSS vulnerability

Open Bug Bounty ID: OBB-673830 Description| Value ---|--- Affected Website:| whitesellco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all releases of CHICKEN up to and including 4.11 it wil...

Chrome chromehtml: Code Execution

Try this: chromehtml:"%20--renderer-path="calc"%20--no-sandbox Disabling sandbox does matter : Tested with Google Chrome Chrome 1.0.154.46 on Win XP/Vista and IE6/IE7 and it works ... Full PoC: Chrome URI Handler Remote Command Execution PoC This is a test...