1154 matches found
HackerOne: Know whether private program for company exist or not
HI, There are some company which are hosting private BB on HackerOne which are not visible unless they invite you. However, you can check if any company is hosting private BB on HackerOne or not if you can guess the username they use. Generally most company chooses the same name as their company...
Error: "HTTP 404 Not Found" When Accessing StoreFront Through NetScaler Gateway
After you enter your credentials on the NetScaler Gateway login page the following error is displayed: HTTP 404 Page Not Found...
nevers.onvasortir.com XSS vulnerability
Open Bug Bounty ID: OBB-102302 Description| Value ---|--- Affected Website:| nevers.onvasortir.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
montauban.onvasortir.com XSS vulnerability
Open Bug Bounty ID: OBB-102295 Description| Value ---|--- Affected Website:| montauban.onvasortir.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
chateauroux.onvasortir.com XSS vulnerability
Open Bug Bounty ID: OBB-102265 Description| Value ---|--- Affected Website:| chateauroux.onvasortir.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
alger.urbeez.com XSS vulnerability
Open Bug Bounty ID: OBB-102235 Description| Value ---|--- Affected Website:| alger.urbeez.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
dieppe.onvasortir.com XSS vulnerability
Open Bug Bounty ID: OBB-93204 Description| Value ---|--- Affected Website:| dieppe.onvasortir.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Enorth Webpublisher CMS SQL Injection Vulnerability
Enorth Webpublisher CMS suffers from a remote SQL injection vulnerability. Title: ==== CVE-2015-5617Enorth Webpublisher CMS SQL Injection from deletependingnews.jsp cbNewsid Vendor: ====== http://products.enorth.com.cn/bfnrglxt/index.shtml Enorth Webpublisher CMS so far of the scale of tens of...
JON: Cross Site scripting possible on the JBoss ON 404 error page
It was discovered that a cross-site scripting XSS vulnerability on a JBoss Operations Network 404 error page allowed for session fixation attacks. An attacker could use this flaw to impersonate a legitimate user, resulting in compromised integrity of secure data...
NetCracker Resource Management System 8.0 SQL Injection
Vulnerability type: SQL Injection Vendor: http://www.netcracker.com/ Product: NetCracker Resource Management System Affected version: = 8.0 Patched version: 8.2 Credit: Foo Jong Meng, Chia Junyuan, Benjamin Tan CVE ID: CVE-2015-3423 PROOF OF CONCEPT SQLi SQL Injection SQLi vulnerability in multip...
TYPO3 '404 Page not found handling' extension cross-site scripting vulnerability
TYPO3 is a free and open source content management system. 404 Page not found handling is a 404 Page not found handling extension plugin. A cross-site scripting vulnerability exists in the TYPO3 '404 Page not found handling' extension that allows remote attackers to exploit the vulnerability to...
CVE-2015-3391
The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page...
MGASA-2015-0116 Updated setup package fixes security vulnerability
An issue has been identified in Mageia 4's setup package where the /etc/shadow and /etc/gshadow files containing password hashes were created with incorrect permissions, making them world-readable mga14516. This update fixes this issue by enforcing that those files are owned by the root user and...
CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...
All In One WP Security & Firewall vulnerable to cross-site request forgery
Overview All In One WP Security & Firewall is WordPress plugin that provides security functionality. All In One WP Security & Firewall contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, access logs 404 events maintained by the...
Backup Job or Backup Proxy rescan fails with “Failed to create processing task for VM Error: Disk 'GUID' not found”
After installing patch 1 for Veeam Backup & Replication 8, jobs may start to fail with the following error message:Error Failed to create processing task for VM Error: Disk ''...
UNIT4 Prosoft HRMS 8.14.230.47 Cross Site Scripting
Vulnerability type: Cross-site Scripting Vendor: http://www.unit4.com/ Product: UNIT4 Prosoft HRMS Product site: http://www.unit4apac.com/products/prosofthrms Affected version: 8.14.230.47 Fixed version: 8.14.330.43 Credit: Jerold Hoong & Edric Teo PROOF OF CONCEPT The login page of UNIT4's Proso...
Absolut Engine 1.73 - Multiple Vulnerabilities
CMS Absolute Engine version 1.73 suffers from cross site scripting and remote SQL injection vulnerabilities. Advisory: Multiple SQL Injections and Reflecting XSS in Absolut Engine v.1.73 CMS Author: Steffen Rösemann Affected Software: CMS Absolut Engine v. 1.73 Vendor URL:...
Code injection
The LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized user role for certain users, which allows remote attackers with the pre-authorized role to gain privileges and possibly obtain sensitive information by accessing a Page Not Found 404 page...
