Authorization

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168...

NetNumber Titan ENUM/DNS/NP 7.9.1 - Path Traversal / Authorization Bypass

Exploit Title: NetNumber Titan ENUM/DNS/NP - Path Traversal - Authorization Bypass Google Dork: N/A Date: 4/29/2019 Exploit Author: MobileNetworkSecurity Vendor Homepage: https://www.netnumber.com/products/data Software Link: N/A Version: Titan Master 7.9.1 Tested on: Linux CVE : N/A Type: WEBAPP...

CVE-2019-7219

Unauthenticated reflected cross-site scripting XSS exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead...

Vimeo: Possibility to overwrite any file in the vpe.cdn.vimeo.tv leads to the Stored XSS for the all customers on the embed.vhx.tv

By modifying the Content-Type to be blank, during a PUT command, the researcher was able to upload files to the CDN. This has been resolved. It was possible to write and overwrite arbitrary files to the CDN vpe.cdn.vimeo.tv used for JS scripts delivery on the various in-scope assets using the PUT...

SSRF via REST API /plugins/servlet/gadgets/makeRequest

Confluence installations have permissive whitelist that allows to fetch any URL using confluence like as the proxy. Use GET request GET /plugins/servlet/gadgets/makeRequest?url= Example: to get Yandex start page or any resource you want. code:java GET...

urbac-propiedades.com XSS vulnerability

Open Bug Bounty ID: OBB-590783 Description| Value ---|--- Affected Website:| urbac-propiedades.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Remote code execution

An Arbitrary Free Remote Code Execution issue was discovered in Design Science MathType 6.9c. Crafted input can overwrite a structure, leading to a function call with an invalid parameter, and a subsequent free of important data such as a function pointer or list pointer. This is fixed in 6.9d...

Default configuration

Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens...

az.train.org XSS vulnerability

Open Bug Bounty ID: OBB-550560 Description| Value ---|--- Affected Website:| az.train.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

worlddatabaseofhappiness.eur.nl XSS vulnerability

Open Bug Bounty ID: OBB-472506 Description| Value ---|--- Affected Website:| worlddatabaseofhappiness.eur.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

en.camsprivat.com XSS vulnerability

Open Bug Bounty ID: OBB-456973 Description| Value ---|--- Affected Website:| en.camsprivat.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

dfcporsche.com XSS vulnerability

Open Bug Bounty ID: OBB-440712 Description| Value ---|--- Affected Website:| dfcporsche.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

api.kostprice.com XSS vulnerability

Open Bug Bounty ID: OBB-276493 Description| Value ---|--- Affected Website:| api.kostprice.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces . This expression will be evaluated by any other authenticated user who views the...

D-Link DIR-601 Command Injection

Advisory Information Title: DIR-601 Command injection in ping functionality Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues as per the email...

Cardoza WordPress Poll 34.05 SQL Injection Vulnerability

Cardoza WordPress Poll plugin version 34.05 suffers from multiple remote SQL injection vulnerabilities. Exploit Title : Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin Author:Marcela Benetrix home:www.girlinthemiddle.net Date: 01/21/13 version: 34.05 software...

AlegroCart <= 1.2. x (category_next) blind defect and repair-vulnerability warning-the black bar safety net

Title : AlegroCart = 1.2. x categorynext Blind SQL Injection Vulnerability Author : KedAns-Dz E-mail : [email protected] [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -0 0 2 1 3 5 5 5 2 4 8 7 0 1 Web Site : www.1337day.com www.exploit-id.com www.09exploit.com Twitte...

Fixed XSS vulnerability at assinatura.dgabc.com.br

Security researcher mygotmanoel, has submitted on 03/03/2008 a cross-site-scripting XSS vulnerability affecting assinatura.dgabc.com.br, which at the time of submission ranked 74924 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It...

Fixed XSS vulnerability at www.ecrater.com

Security researcher tenest, has submitted on 29/12/2007 a cross-site-scripting XSS vulnerability affecting www.ecrater.com, which at the time of submission ranked 18041 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/12/2007. It is currently...

Fixed XSS vulnerability at www.croatiacrawler.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.croatiacrawler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is...