EUVD-2017-7148

Malware in sbrugna...

CVE-2017-15725

An XML External Entity Injection vulnerability exists in Dzone AnswerHub...

U.S. Dept Of Defense: Stored XSS at ██████userprofile.aspx

Summary: Stored XSS vulnerability exists at ██████████userprofile.aspx under "say something about yourself...". XSS can be used for a variety of attacks. Impact XSS can be used to steal cookies, password or to run arbitrary code in the victim's browser. Step-by-step Reproduction Instructions 1...

CVE-2017-15725

An XML External Entity Injection vulnerability exists in Dzone AnswerHub...

Xxe

An XML External Entity Injection vulnerability exists in Dzone AnswerHub...

CVE-2017-15725

An XML External Entity Injection vulnerability exists in Dzone AnswerHub...

CVE-2017-15725

CVE-2017-15725: An XML External Entity (XXE) vulnerability in Dzone AnswerHub. NVD metrics show CVSSv2 base 5.0 (Partial confidentiality) and CVSSv3.1 base 7.5 (High) with network attack vector and no user interaction. No exploitation details or fixes are provided in the documents.