RICOH MP 2001 Printer Cross Site Scripting

Exploit Title: RICOH MP 2001 Printer - HTML Injection and Stored XSS Date: 2018-09-13 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh.com.au/products/office-solutions/printers-and-copiers/mfd-black-and-white/mp-2001sp Software : RICOH...

ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting

Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Date: 2018-09-12 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software : ZOHO Corp ManageEngine SupportCente...

RICOH SP 4510SF Printer Cross Site Scripting

Exploit Title: RICOH SP 4510SF Printer - HTML Injection and Stored XSS Date: 2018-09-13 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh-europe.com/products/office-printers-fax/all-in-one-printers/sp-4510sf.html Software : RICOH Printer...

navigatecms.com XSS vulnerability

Open Bug Bounty ID: OBB-677797 Description| Value ---|--- Affected Website:| navigatecms.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AVM FRITZ!OS < 6.30 Multiple Vulnerabilities

AVM FRITZ!Box devices running AVM FRITZ!OS before 6.30 are prone multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Internet Bug Bounty: Improper handling of Chunked data request in sapi_apache2.c leads to Reflected XSS

Hey, Chunked requests can trigger xss and html injection at any end point because the APRBRIGADEINSERTTAILbrigade, bucket is getting destroyed by other handlers. Affected versions: Any OS: Any https://bugs.php.net/bug.php?id=76 Prashanths-MacBook-Pro: prashanthvarma$ nc localhost 80 POST /lol.php...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

Design/Logic Flaw

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 is affected by an HTML injection vulnerability: attackers can inject HTML via the homepage description in the Settings component. The issue is confirmed across multiple sources (NVD/CNVD) and is tied to the description field rather than a dedicated input validation path. The provid...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

IBM Campaign HTML Injection Vulnerability

IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. An HTML injection vulnerability exists in IBM Campaign versions 9.1, 9.1.2, and 10, which can be exploited by...

CVE-2017-1115

IBM Campaign (Unica Campaign) versions 9.1, 9.1.2, and 10 are affected by an HTML injection vulnerability. A remote attacker could inject malicious HTML that would be executed in a victim’s browser within the hosting site’s security context. The issue is documented across multiple feeds (IBM X-Fo...

CVE-2017-1115

IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153...

Design/Logic Flaw

IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153...

CVE-2017-1115

IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153...

CVE-2017-1115

IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153...

CVE-2018-0654

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page...

CVE-2018-0642

Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0652

GROWI is affected: CVE-2018-0652 is a Stored XSS in the UserGroup Management section of admin page, impacting GROWI v3.1.11 and earlier. The underlying issue allows remote attackers with authentication to inject arbitrary scripts/HTML in the logged-in user’s browser. Documented impact includes ar...