741 matches found
detalleweb.com XSS vulnerability
Open Bug Bounty ID: OBB-59400 Description| Value ---|--- Affected Website:| detalleweb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
UBUNTU-CVE-2014-9622
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...
CVE-2014-8791
creationtimestamp| type| source ---|---|--- 2014-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35545 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/tuleapunserializeexec.rb 2025-02-06 03:13:42+00:00|...
All In One Wordpress FW 3.8.3 - Persistent Vulnerability
Document Title: =============== All In One Wordpress FW 3.8.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID: ====================================...
Mavenlink: Login CSRF
Hi all, Heres the request on the login page POST /login HTTP/1.1 Host: app.mavenlink.com User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64; rv:31.0 Gecko/20100101 Firefox/31.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip,...
nrhz.de XSS vulnerability
Open Bug Bounty ID: OBB-46093 Description| Value ---|--- Affected Website:| nrhz.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
jetAudio 7.1.9.4030 plus vx - (.m3u) Local Stack Overflow (SEH)
No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...
Asterisk <= 1.0.12 / 1.2.12.1 (chan_skinny) Remote Heap Overflow (PoC)
No description provided by source. !/usr/bin/perl Beyond Security Copyright Noam Rathaus [email protected] The following proof of concept causes the chanskippy to crash in different locations and due to memory corruption as well as double free calls, this is based on the finding of...
Sophos Web Protection Appliance sblistpack Arbitrary Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Threat Outbreak Alert: Fake Account Transfer Notification Email Messages on February 12, 2014
Medium Alert ID: 32858 First Published: 2014 February 13 17:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a transfer and quote notice for the recipient. The text in the email message attempts to convince the recipie...
Threat Outbreak Alert: Fake Secure Message Delivery Notification Email Messages on February 5, 2014
Medium Alert ID: 32730 First Published: 2014 February 5 15:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a secure message for the recipient. The text in the email message attempts to convince the recipient to open t...
Threat Outbreak Alert: Fake Product Invoice Notification Email Messages on September 10, 2014
Medium Alert ID: 32697 First Published: 2014 February 4 19:43 GMT Last Updated: 2014 September 11 13:23 GMT Version: 62 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice notification for the recipient. The text in the email...
Threat Outbreak Alert: Fake Photograph Sharing Email Messages on January 17, 2014
Medium Alert ID: 32482 First Published: 2014 January 17 20:27 GMT Last Updated: 2014 January 22 14:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to...
XSS in the view parameter of several actions
The following XSS issues were detected by a customer. /changelog?max=30&view=cru%22;alert4015891;//%22&@asv=cru /project/CR?max=30&projectKey=CR&view=all";alert3166631;//"&@asv=all /user/c30626?max=30&name=c30626&view=all";alert1287220;//"&@asv=all...
Threat Outbreak Alert: Fake Mortgage Update Information Email Messages on December 6, 2013
Medium Alert ID: 32063 First Published: 2013 December 6 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain mortgage details for the recipient. The text in the email message attempts to convince the recipient to open t...
Greenbone Security Assistant (GSA) Detection (HTTP)
HTTP based detection of the Greenbone Security Assistant GSA. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-3906
creationtimestamp| type| source ---|---|--- 2013-11-05 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2013/11/cve-2013-3906-a-graphics-vulnerability-exploited-through-word-documents/ 2013-11-08 08:57:29+00:00| seen| MISP/527ca75e-353c-4c91-a7d5-407a950d2109 2013-11-08 09:23:16+00:00| seen|...
Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Windows)
This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12win.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Windows Authors: Arun Kallavi Copyright:...
