Exploit for Cross-site Scripting in Vanillaforums Vanilla

CVE-2020-8825 Publish: CVE-2020-8825https:...

PT-2020-20308

Name of the Vulnerable Software and Affected Versions Vanilla version 2.6.3 Description The issue allows for stored XSS in the index.php?p=/dashboard/settings/branding endpoint. Recommendations For version 2.6.3, update to a newer version that contains a fix for this issue...

CVE-2020-8825: Improper Neutralization of Input During Web Page Generation

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

Misp-Dashboard - A Dashboard For A Real-Time Overview Of Threat Intelligence From MISP Instances

A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of each...

PT-2020-14901

Name of the Vulnerable Software and Affected Versions Ceph versions 14.2.5 through 14.2.6 Ceph version 15.0.0 Description A path traversal flaw was found in the Ceph dashboard, allowing an unauthenticated attacker to cause information disclosure on the host machine running the Ceph dashboard...

kubernetes security update

kubernetes 1.12.10-1.0.10 - CVE-2019-16276 Kubernetes Vulnerabilities Allow Authentication Bypass, DoS 1.12.10-1.0.9 - Define rolling update for flannel 1.12.10-1.0.8 - Modify flannel/dashboard image tags to use images that have the cve fix kubeadm-ha-setup 0.0.2-1.0.68 - Pull image prior to upda...

Kibana 6.6.1 - CSV Injection

Kibana 6.6.1 - CSV Injection Exploit Title: Kibana 6.6.1 - CSV Injection Google Dork: inurl:"/app/kibana" intitle:"Kibana" Date: 2020-01-15 Exploit Author: Aamir Rehman Vendor Homepage: https://www.elastic.co/kibana Software Link: https://www.elastic.co/downloads/ Version: v6.6.1 possibly latest...

Kibana 6.6.1 - CSV Injection

Exploit Title: Kibana 6.6.1 - CSV Injection Google Dork: inurl:"/app/kibana" intitle:"Kibana" Date: 2020-01-15 Exploit Author: Aamir Rehman Vendor Homepage: https://www.elastic.co/kibana Software Link: https://www.elastic.co/downloads/ Version: v6.6.1 possibly latest versions Tested on: Kibana...

CVE-2020-1716

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph...

CVE-2019-5470

An information disclosure issue was discovered GitLab versions 12.1.2, 12.0.4, and 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information...

Information disclosure

An information disclosure issue was discovered GitLab versions 12.1.2, 12.0.4, and 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information...

CVE-2019-5470

Removed by vendor...

CVE-2019-5470

GitLab CVE-2019-5470 is an information-disclosure vulnerability affecting GitLab releases before 12.1.2, 12.0.4, and 11.11.6 in the security dashboard, potentially exposing vulnerability feedback information. The cited sources confirm the affected version ranges and that exploitation would involv...

PT-2020-11138

Name of the Vulnerable Software and Affected Versions GitLab versions prior to 12.1.2 GitLab versions prior to 12.0.4 GitLab versions prior to 11.11.6 Description An information disclosure issue was discovered in the security dashboard, which could result in the disclosure of vulnerability feedba...

CVE-2019-5470: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure issue was discovered GitLab versions 12.1.2, 12.0.4, and 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information...

WordPress Plugin Time Capsule 1.21.16 - Authentication Bypass

Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass Date: 2020-01-16 Exploit Author: B. Canavate Vendor Homepage: https://wptimecapsule.com/ Software Link: https://wptimecapsule.com/ Version: Wordpress Time Capsule Plugin 1.21.16 Tested on: LAMP stack with most recent...

Citrix SD-WAN Software Feature Cheat Sheet

The purpose of this article is to provide guidance of what software, hardware, license and management tool is supported per release. Citrix SD-WAN Software Feature Cheat Sheet also attached for reference R11.4.2 – Nov 2,2021| • You can now configure the LTE interface-based WAN link as a Private...

Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS

Video on Admin Dashboard is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. A user can insert a simple script in the Widget Title text field, e.g. "alert'XSS';. Every specified user role by the plugin will now be targeted...

Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS

Video on Admin Dashboard is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. PoC A user can insert a simple script in the Widget Title text field, e.g. ". Every specified user role by the plugin will now be targeted by the...

WordPress Videos on Admin Dashboard plugin <= 1.1.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeroen Mulder in WordPress Videos on Admin Dashboard plugin versions = 1.1.3. Solution Update the WordPress Videos on Admin Dashboard plugin to the latest available version at least 1.1.4...