23813 matches found
CVE-2018-6014
Subsonic v6.1.3 has an insecure allow-access-from domain="" Flash cross-domain policy that allows an attacker to retrieve sensitive user information via a read request. To exploit this issue, an attacker must convince the user to visit a web site loaded with a SWF file created specifically to ste...
CVE-2018-6014
Subsonic v6.1.3 has an insecure allow-access-from domain="" Flash cross-domain policy that allows an attacker to retrieve sensitive user information via a read request. To exploit this issue, an attacker must convince the user to visit a web site loaded with a SWF file created specifically to ste...
Cross site scripting
Subsonic v6.1.3 has an insecure allow-access-from domain="" Flash cross-domain policy that allows an attacker to retrieve sensitive user information via a read request. To exploit this issue, an attacker must convince the user to visit a web site loaded with a SWF file created specifically to ste...
CVE-2018-6014
Subsonic v6.1.3 has an insecure allow-access-from domain="" Flash cross-domain policy that allows an attacker to retrieve sensitive user information via a read request. To exploit this issue, an attacker must convince the user to visit a web site loaded with a SWF file created specifically to ste...
CVE-2018-6014
CVE-2018-6014 affects Subsonic v6.1.3, where an insecure Flash cross-domain policy (allow-access-from domain="*") can enable an attacker to retrieve sensitive user information via a read request. Exploitation requires convincing a user to visit a site containing a specially crafted SWF file to st...
WordPress MediaElement Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . MediaElement is used in one of the HTML5 player . A cross-site scripting vulnerability exists in the Flash...
studentaffairs.loyno.edu XSS vulnerability
Open Bug Bounty ID: OBB-539348 Description| Value ---|--- Affected Website:| studentaffairs.loyno.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
learner.org XSS vulnerability
Open Bug Bounty ID: OBB-533764 Description| Value ---|--- Affected Website:| learner.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Subsonic v6.1.3 - Flash Cross-Domain Policy Vulnerability
Document Title: =============== Subsonic v6.1.3 - Flash Cross-Domain Policy Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2115 Video: https://www.youtube.com/watch?v=t3nYuhAHOMg http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6014...
Subsonic v6.1.3 - Flash Cross-Domain Policy Vulnerability
Document Title: =============== Subsonic v6.1.3 - Flash Cross-Domain Policy Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2115 Video: https://www.youtube.com/watch?v=t3nYuhAHOMg http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6014...
CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
UBUNTU-CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
DEBIAN-CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
uk.computers.toshiba-europe.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-530930 Description| Value ---|--- Affected Website:| uk.computers.toshiba-europe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
asu.edu XSS vulnerability
Open Bug Bounty ID: OBB-530924 Description| Value ---|--- Affected Website:| asu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
epson.com.au XSS vulnerability
Open Bug Bounty ID: OBB-530923 Description| Value ---|--- Affected Website:| epson.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
redcross.org Open Redirect vulnerability
Open Bug Bounty ID: OBB-530922 Description| Value ---|--- Affected Website:| redcross.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
nato.int Open Redirect vulnerability
Open Bug Bounty ID: OBB-530921 Description| Value ---|--- Affected Website:| nato.int Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...