GitLab: XSS on Issue reference numbers

Dear team, I found an XSS that occurs when users move mouse over reference numbers of issues. This XSS occurs on Firefox. It does not occurs on Webkit-based ones such as Safari, Chrome. I haven't tested on Edge. It can be also occured in older browsers due to svg4everybody and...

Rockstar Games: xss on https://www.rockstargames.com/GTAOnline/jp/screens/

In this report, the researcher identified a Cross-Site Scripting vulnerability on the /GTAOnline/jp/screens/ section of the website. Cross-Site Scripting can be exploited to steal cookies or help perform other attacks. This was possible because the page would blindly decode and attempt to load an...

Gatecoin: DOM Based XSS charting_library

Description chartinglibrary contains a DOM Based XSS vulnerability that allows to load an external JS script and execute it. PoC Open URL in any browser...

File Containment Vulnerability in Jiayuan Talent System v3.6

Jiayuan Talent System is a talent website program based on ASP+MSSQL developed by Shanghai Jiabi Network Technology Development Co. Jia Yuan Talent System v3.6 exists a file inclusion vulnerability, the vulnerability is due to the system add and execute scheduled tasks failed to effectively filte...

Upserve : Ability to create own account UUID leads to stored XSS

I found an interesting bug where the system allows a user to create their own UUIDs. There are character length restrictions on this action, however it's not bound to a specific set of characters. Even so, I was able to include an external script that I URL shortened to just hit the character lim...

Multiple F5 BIG-IP product lifting vulnerabilities

F5 BIG-IP LTM, etc. are all products of F5 Corporation in the U.S. LTM is a local traffic manager; GTM is a wide-area traffic manager; and WebAccelerator is an application gas pedal. A power-lifting vulnerability exists in several F5 BIG-IP products, which can be exploited by attackers to modify...

Cardoza WordPress Poll 34.05 SQL Injection Vulnerability

Cardoza WordPress Poll plugin version 34.05 suffers from multiple remote SQL injection vulnerabilities. Exploit Title : Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin Author:Marcela Benetrix home:www.girlinthemiddle.net Date: 01/21/13 version: 34.05 software...

Kaspersky AntiVirus and Internet Security Unspecified Vulnerability

This host is installed with Kaspersky AntiVirus or Internet Security and is prone to an unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyprdtssecbypassvulnaug09.nasl 6516 2017-07-04 12:20:47Z cfischer $ Kaspersky AntiVirus and Internet Security Unspecified Vulnerability...

Mozilla Seamonkey Multiple Vulnerability Jun-09 (Linux)

The host is installed with Seamonkey, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnjun09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Jun-09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone...

Mozilla Thunderbird Multiple Vulnerability Jun-09 (Windows)

The host is installed with Thunderbird, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbthunderbirdmultvulnjun09win.nasl 4892 2016-12-30 15:39:07Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities Jun-09 Windows Authors: Antu Sanadi Copyright: Copyright c 2009...

PHP Include Exploit in Mail Manage EX v3.1.8 and maybe others.

Description: PHP Include Exploit in Mail Manage EX v3.1.8 Compromise: a malicious PHP script from an external host may be included and executed. Vulnerable Systems: all system using mmex.php v3.1.8 and maybe lower not tested. Details: The PHP Include exploit exist in de folowing code,...

PayPal Store Front 3.0 - index.php Remote File Inclusion

PayPal Store Front 3.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/8791/info PayPal Store Front is prone to a remote file include vulnerability. It may be possible for a remote attacker to influence the include path for an external page to point to an...

Phorum 3.3.2a remote command execution

Target: Phorum 3.3.2a prior versions? Description: In Phorum 3.3.2a a bulletin board there's a security flaw that lets remote users include external php scripts and execute arbitary code. Found by: Markus [email protected] Vendor: http://www.phorum.org Notified Vendor: Yes, already fixed...