10465 matches found
Zomato: [www.zomato.com] Privilege Escalation - Control reviews - /████dashboard_handler.php
Introduction The handler that controls all the ███ actions for reviews is accessible for any user. The following actions are thus being left open to anyone: getmanagerstatus read███████ unread██████████ ████████ feature██████ unfeature████████ moderate████ unmoderate█████ drop ███ sendmail...
CVE-2017-15312
Huawei SmartCare V200R003C10 has a stored XSS cross-site scripting vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device...
Cross site scripting
Huawei SmartCare V200R003C10 has a stored XSS cross-site scripting vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device...
CVE-2017-15312
Huawei SmartCare V200R003C10 has a stored XSS cross-site scripting vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device...
CVE-2017-15312
Huawei SmartCare V200R003C10 is affected by a stored XSS vulnerability in the dashboard module. A remote authenticated attacker could inject malicious scripts into the affected device via the dashboard, enabling script execution in the user’s browser. The issue is documented across multiple recor...
PT-2017-13990
Name of the Vulnerable Software and Affected Versions Huawei SmartCare version V200R003C10 Description The issue is related to a stored XSS cross-site scripting vulnerability in the dashboard module. A remote authenticated attacker could exploit this to inject malicious scripts in the affected...
CVE-2017-15312: Improper Neutralization of Input During Web Page Generation
Huawei SmartCare V200R003C10 has a stored XSS cross-site scripting vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device...
SDWAN 4000 SE- VWAN service is disabled automatically on SDWAN
MCN not working properly as the Virtual WAN Service got disabled itself. Dashboard showing the following error message: Error: Disabled by dpdkdaemon due to hardware initialization failure 4 times. The Citrix Virtual WAN Service was disabled...
Shopify: Bypass Filter and get Stored Xss
Description Shopify allows developers to create a special type of application called a "Sales Channel". Developers are allowed to upload a 16x16 SVG "Navigation Icon" for their app provided the SVG follows the design guidelines which limits the allowed elements and attributes. For some reason whe...
Deconf: Unauthenticated Reflected XSS in admin dashboard
The researcher has identified a Reflected XSS vulnerability within an analytics report of our plugin. The report was well documented, providing a step-by-step PoC to demonstrate the vulnerability...
CVE-2017-16961
A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process request with a...
PT-2017-14664
Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.20 Description A SQL injection issue allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack involves an...
CVE-2017-16961: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process request with a...
IP-Biter - The Hacker-friendly E-Mail Tracking Framework
IP-Biter is an open source, easy to deploy, tracking framework that generate high configurables and uniques tracking images and links to embed in e-mails, sites or chat systems and visualize, in an hacker-friendly dashboard, high detailed reports of the tracked users who visualize the image or op...
Faraday v2.7 - Collaborative Penetration Test and Vulnerability Management Platform
Faraday is the Integrated Multiuser Risk Environment you have alwasy been looking for! It maps and leverages all the data you generate in real time , letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the risks and impacts and risks being assessed by the...
Php Inventory Arbitrary File Upload Vulnerability
Php Inventory&Invoice Management System is a sales management system. The system features inventory management, invoice management and user management. An arbitrary file upload vulnerability exists in Php Inventory&Invoice Management System. An attacker can exploit this vulnerability to upload...
python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs
A redirect flaw, where the issafeurl function did not correctly sanitize numeric-URL user input, was found in python-django. A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard...
CVE-2017-15990
Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...