Dream line business enterprise station building system exists arbitrary file download vulnerability

Dream line business enterprise station building system is to use PHP + MySQL way to run the open source station building system. Dream line enterprise building system there are arbitrary file download vulnerability, an attacker can use the vulnerability to download any system file...

French Dark-Web Drug Dealer Sentenced to 20 Years in US Prison

A dark web drugs kingpin who was arrested last year when he arrived in the United States to compete in the World Beard and Mustache Championships has now been sentenced to 20 years in prison. On Tuesday, U.S. District Judge Robert N. Scola sentenced 36-year-old French national Gal Vallerius, aka...

French Dark-Web Drug Dealer Sentenced to 20 Years in US Prison

A dark web drugs kingpin who was arrested last year when he arrived in the United States to compete in the World Beard and Mustache Championships has now been sentenced to 20 years in prison. On Tuesday, U.S. District Judge Robert N. Scola sentenced 36-year-old French national Gal Vallerius, aka...

german-dream-nails.com XSS vulnerability

Open Bug Bounty ID: OBB-660337 Description| Value ---|--- Affected Website:| german-dream-nails.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dream-pizza.com XSS vulnerability

Open Bug Bounty ID: OBB-659115 Description| Value ---|--- Affected Website:| dream-pizza.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in Guangzhou Starscream Animation Design Co.

Guangzhou Star Dream Animation Design Co., Ltd. is a comprehensive animation design and production, peripheral product design and development, game development, AR enhancement technology development and other comprehensive animation culture industry company. There is a SQL injection vulnerability...

SQL Injection Vulnerability at lmxcms Tags Search

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A SQL injection vulnerability exists in lmxcms Tags search. An attacker can exploit the vulnerability to obtain sensitive information from the database...

dreamcarracing.com XSS vulnerability

Open Bug Bounty ID: OBB-609954 Description| Value ---|--- Affected Website:| dreamcarracing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

german-dream-nails.com XSS vulnerability

Open Bug Bounty ID: OBB-581034 Description| Value ---|--- Affected Website:| german-dream-nails.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dream-me-up.fr XSS vulnerability

Open Bug Bounty ID: OBB-559671 Description| Value ---|--- Affected Website:| dream-me-up.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dream-seed.com XSS vulnerability

Open Bug Bounty ID: OBB-551986 Description| Value ---|--- Affected Website:| dream-seed.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

travel.dream.co.id XSS vulnerability

Open Bug Bounty ID: OBB-549085 Description| Value ---|--- Affected Website:| travel.dream.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dream-me-up.fr XSS vulnerability

Open Bug Bounty ID: OBB-451395 Description| Value ---|--- Affected Website:| dream-me-up.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

dream-pro.info XSS vulnerability

Open Bug Bounty ID: OBB-450482 Description| Value ---|--- Affected Website:| dream-pro.info Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Cross site scripting

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

CVE-2017-15287

Dream Multimedia Dreambox devices with the BouquetEditor WebPlugin (Dreambox WebControl 2.0.0) are vulnerable to reflected XSS, as shown in the Bouquet name field or the /file URI parameter. The issue is triggered via user-supplied input processed by the WebControl component, allowing arbitrary J...

Dark-Web Drug Dealer Arrested After He Travelled US for World Beard Championships

United States authorities arrested suspected dark web drug kingpin late last month while he was travelling from his base in France to the United States of America for this year’s annual World Beard and Mustache Championships. Gal Vallerius, a 38-year-old French national, was travelling to Austin,...

SQL Injection Vulnerability in Dream Cms

Dream Cms or "lmxcms" is an open source website management system CMS with no license restrictions. Dream CMS 1.4 version of the administration background db.class.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

Dark Web Users Suspect "Dream Market" Has Also Been Backdoored by Feds

By now you might be aware of the took down of two of the largest online dark websites—AlphaBay and Hansa—in what's being called the largest-ever international operation against the dark web's black market conducted by the FBI, DEA Drug Enforcement Agency and Dutch National Police. But the...

Stored Cross-Site Scripting Vulnerability in Dream CMS V1.4

Dream cms, abbreviated as "lmxcms", is an open source website management system cms with no license restrictions. Dream CMS V1.4 management background can be modified through the content management function of the page description to trigger the storage of cross-site scripts, allowing attackers t...