libraries.udmercy.edu XSS vulnerability

Open Bug Bounty ID: OBB-466377 Description| Value ---|--- Affected Website:| libraries.udmercy.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability

Summary ZKAccess Systems are built on flexible, open technology to provide management, real-time monitoring, and control of your access control system-all from a browser, with no additional software to install. Our secure Web-hosted infrastructure and centralized online administration reduce your...

Oracle WebLogic WSAT Remote Code Execution

The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WSAT endpoint due to unsafe deserialization of XML encoded Java objects. An unauthenticated, remote attacker can exploit this, via a crafted Java object, to execute arbitrary Java code in the context of...

CVE-2017-15667

creationtimestamp| type| source ---|---|--- 2017-12-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43403...

Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit

Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...

CVE-2017-5717

creationtimestamp| type| source ---|---|--- 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43373...

CVE-2017-7411

creationtimestamp| type| source ---|---|--- 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43374 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/tuleaprestunserializeexec.rb 2025-02-06...

Embedthis GoAhead < 3.6.5 RCE Vulnerability - Active Check

Embedthis GoAhead is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Palo Alto Networks PAN-OS 8.0.x < 8.0.6 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.0.6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104811; scriptversion"1.11";...

Palo Alto Networks PAN-OS 7.1.x < 7.1.14 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.14. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105298; scriptversion"1.8";...

CVE-2017-17643

creationtimestamp| type| source ---|---|--- 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43335...

CVE-2017-17645

creationtimestamp| type| source ---|---|--- 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43336...

CVE-2017-14016

creationtimestamp| type| source ---|---|--- 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43340 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/advantechwebaccesswebvrpcsbof.rb 2025-02-06...

CVE-2017-15944

creationtimestamp| type| source ---|---|--- 2017-12-13 09:00:49+00:00| seen| https://t.me/canyoupwnme/2863 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43342 2018-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44597 2018-05-29 15:50:33+00:00| see...

CVE-2017-11890

creationtimestamp| type| source ---|---|--- 2017-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=248 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43369...

CVE-2017-11855

creationtimestamp| type| source ---|---|--- 2017-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=248 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43371...

CVE-2017-11907

creationtimestamp| type| source ---|---|--- 2017-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=248 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43370 2025-06-06 11:08:23+00:00| seen|...

CVE-2017-11906

creationtimestamp| type| source ---|---|--- 2017-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=248 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43372...

CVE-2017-11903

creationtimestamp| type| source ---|---|--- 2017-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=248 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43367...

Design/Logic Flaw

Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack...