Lucene search
+L

3049 matches found

Openbugbounty
Openbugbounty
•added 2017/11/02 3:19 p.m.•14 views

resourcepacks24.de XSS vulnerability

Open Bug Bounty ID: OBB-388359 Description| Value ---|--- Affected Website:| resourcepacks24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/26 4:49 a.m.•11 views

wama24.de XSS vulnerability

Open Bug Bounty ID: OBB-367823 Description| Value ---|--- Affected Website:| wama24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/25 1:53 p.m.•11 views

resourcepacks24.de XSS vulnerability

Open Bug Bounty ID: OBB-367599 Description| Value ---|--- Affected Website:| resourcepacks24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/25 1:35 a.m.•25 views

anne-de-solene.com XSS vulnerability

Open Bug Bounty ID: OBB-365203 Description| Value ---|--- Affected Website:| anne-de-solene.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/25 1:22 a.m.•15 views

es.gites-de-france.com XSS vulnerability

Open Bug Bounty ID: OBB-364671 Description| Value ---|--- Affected Website:| es.gites-de-france.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/25 12:56 a.m.•13 views

gites-de-france.com XSS vulnerability

Open Bug Bounty ID: OBB-364354 Description| Value ---|--- Affected Website:| gites-de-france.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

6.4AI score
SaveExploits0
Securelist
Securelist
•added 2017/10/24 9:00 a.m.•140 views

Dangerous liaisons

It seems just about everyone has written about the dangers of online dating, from psychology magazines to crime chronicles. But there is one less obvious threat not related to hooking up with strangers – and that is the mobile apps used to facilitate the process. We're talking here about...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/22 9:41 p.m.•12 views

gites-de-france.com XSS vulnerability

Vulnerable URL: https://www.gites-de-france.com/activite/vide-greniers-a-porto-vecchio-1334852.html/x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:46 GMT Vulnerability type:| XSS Vulnerability status:|...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/22 8:09 a.m.•17 views

speisekarte24.de XSS vulnerability

Open Bug Bounty ID: OBB-359872 Description| Value ---|--- Affected Website:| speisekarte24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/22 7:53 a.m.•17 views

andries24.de XSS vulnerability

Open Bug Bounty ID: OBB-359870 Description| Value ---|--- Affected Website:| andries24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/20 6:54 p.m.•9 views

fee14.de XSS vulnerability

Open Bug Bounty ID: OBB-355726 Description| Value ---|--- Affected Website:| fee14.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/20 6:16 p.m.•15 views

handyhuelle-24.de XSS vulnerability

Open Bug Bounty ID: OBB-355683 Description| Value ---|--- Affected Website:| handyhuelle-24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Prion
Prion
•added 2017/10/20 3:29 p.m.•21 views

Privilege escalation

The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation...

7.2CVSS7.9AI score0.00759EPSS
SaveExploits4References2Affected Software1
OSV
OSV
•added 2017/10/20 3:29 p.m.•56 views

CVE-2017-12628

The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation...

7.8CVSS7.9AI score
SaveExploits0References2
Mend
Mend
•added 2017/10/20 3:00 p.m.•2 views

CVE-2017-12628

The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation...

8.5CVSS0.00759EPSS
SaveExploits4References6
Cvelist
Cvelist
•added 2017/10/20 3:00 p.m.•59 views

CVE-2017-12628

The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation...

7.9AI score0.00759EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2017/10/20 12:00 a.m.•1 views

PT-2017-12610

Name of the Vulnerable Software and Affected Versions Apache James versions prior to 3.0.1 Description The issue concerns a java de-serialization problem in the JMX server embedded in Apache James, which can be exploited to execute arbitrary commands. This can be used for privilege escalation, as...

7.8CVSS0.00759EPSS
SaveExploits4References8
Openbugbounty
Openbugbounty
•added 2017/10/19 8:14 p.m.•24 views

fahrschool.sat1.de XSS vulnerability

Vulnerable URL: http://fahrschool.sat1.de/res/fla/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

6.3AI score
SaveExploits0
zdt
zdt
•added 2017/10/18 12:00 a.m.•35 views

Xen - Unbounded Recursion in Pagetable De-typing Vulnerability

Exploit for linux platform in category dos / poc Xen allows pagetables of the same level to map each other as readonly in PV domains. This is useful if a guest wants to use the self-referential pagetable trick for easy access to pagetables by mapped virtual address. When cleaning up a pagetable...

7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/10/18 12:00 a.m.•47 views

Xen - Pagetable De-typing Unbounded Recursion

Xen allows pagetables of the same level to map each other as readonly in PV domains. This is useful if a guest wants to use the self-referential pagetable trick for easy access to pagetables by mapped virtual address. When cleaning up a pagetable after the last typed reference to it has been...

8.8CVSS7.7AI score0.0156EPSS
SaveExploits2
Rows per page
Query Builder