Code injection

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...

CVE-2016-1598

Affected software: NetIQ Identity Manager IDM 4.5 Identity Applications, prior to version 4.5.4. Vulnerability: Cross-site scripting (XSS) via the username field that allows an attacker to inject arbitrary HTML into the Role Assignment administrator HTML pages. Root cause (as described): the prog...

CVE-2016-1592

NetIQ Designer for Identity Manager is affected by CVE-2016-1592: an XSS vulnerability in the nrfEntitlementReport.do CGI allows remote attackers to inject arbitrary HTML code in pages rendered for Identity Manager, and affects versions prior to 4.5.3. The connected documents confirm the vulnerab...

Foreman HTML Injection Vulnerability (CNVD-2016-10271)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An HTML injection vulnerability exists in Foreman, which arises from the program's failure to adequately...

Cloudera HUE HTML Injection Vulnerability

Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. Cloudera HUE suffers from an HTML injection vulnerability. An attacker can exploit the vulnerability to steal cookie-based authentication and execute arbitrary HTML or script code...

Cloudera Manager has multiple vulnerabilities

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager suffers from HTML injection and cross-site scripting vulnerabilities. An attacker exploiting the...

Cisco Email Security Appliance Quarantine Email Rendering Vulnerability

A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...

Cisco Email Security Appliance Quarantine Email Rendering Vulnerability

A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...

Magento CMS Invitations Feature HTML Injection Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. An HTML injection vulnerability exists in Magento CMS due to failure to adequately filter user input data. An attacker could exploit this vulnerability to execute arbitrary script...

[SECURITY] [DLA 673-1] kdepimlibs security update

Package : kdepimlibs Version : 4:4.8.4-2+deb7u1 CVE ID : CVE-2016-7966 Debian Bug : 840546 Roland Tapken discovered that insufficient input sanitizing in KMails plain text viewer allowed attackers the injection of HTML code. This might open the way to the exploitation of other vulnerabilities in...

Kmail HTML Injection Vulnerability

KMail is a mail client for KDE that supports protocols such as IMAP and POP3. An HTML injection vulnerability exists in Kmail, which can be exploited by an attacker to steal cookie-based authentication credentials...

PizzaInn Beta 3 Cross Site Scripting

Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - Stored XSS Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email :------------------------ : [email protected] Google Dork :----------------...

openSUSE Security Update : kcoreaddons (openSUSE-2016-1200)

This update for kcoreaddons fixes the following issues : - CVE-2016-7966: HTML injection in plain text viewer boo1002977 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-1200. The...

OPENSUSE-SU-2016:2559-1 Security update for kcoreaddons

This update for kcoreaddons fixes the following issues: - CVE-2016-7966: HTML injection in plain text viewer boo1002977...

OPENSUSE-SU-2016:2558-1 Security update for kcoreaddons

This update for kcoreaddons fixes the following issues: - CVE-2016-7966: HTML injection in plain text viewer boo1002977...

Brave Software: [Android] HTML Injection in BatterySaveArticleRenderer WebView

Summary: HTML Injection in BatterySaveArticleRenderer WebView. Products affected: Android Brave Browser 1.9.56 Steps To Reproduce: Open https://blackfan.ru/brave or html html location="https://www.google.com/search?q=Injection Wait for a full load Click on ArticleModeButton Supporting...

Cross site scripting

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

Abus Security Center 'FTP' HTML Injection Vulnerability

Abuse is a popular video game. An HTML injection vulnerability exists in Abus Security Center due to the program failing to adequately clean up user input. An attacker could exploit the vulnerability to execute arbitrary script code in the context of an affected browser to steal a user's...

Ubuntu: Security Advisory (USN-3100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : kdepimlibs vulnerability (USN-3100-1)

Roland Tapken discovered that the KDE-PIM Libraries incorrectly filtered URLs. A remote attacker could use this issue to perform an HTML injection attack in the KMail plain text viewer. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...