CVE-2017-9313

Multiple Cross-site scripting XSS vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to viewman.cgi, the referers parameter to changereferers.cgi, or the name parameter to saveuser.cgi. NOTE: these issues were not fixed in...

Python Backdoor Framework: NXcrypt

Python Backdoor Framework: NXcrypt Features NXcrypt is a polymorphic ‘python backdoors’ crypter written in python by Hadi Mene h4d3s . The output is fully undetectable . NXcrypt can inject malicious python file into a normal file with multi-threading system . Run it with superuser’s permissions...

Elasticsearch Kibana Cross-Site Scripting Vulnerability (CNVD-2017-15523)

Elasticsearch Kibana is a suite of open source, browser-based tools for analyzing and searching Elasticsearch dashboards. A cross-site scripting vulnerability exists in Elasticsearch Kibana, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which...

CVE-2017-2187

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress Simple Slideshow Manager Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Simple Slideshow Manager, which can be exploited by remote attackers...

Vanilla Forums 2.0.18.7 Remote Code Execution Exploit

Vanilla Forums = 2.0.18.7 RCE shell injector inject a simple php eval shell into target that can be used for further exploitation. Usage Info usage: first, inject the shell: python injectshell.py -a http://www.attacksite.com/forumsubdomain after injecting the shell you can also inject your own...

KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting Remote Code Execution

KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting Remote Code Execution Vulnerability Summary KEMP’s main product, the LoadMaster, is a load balancer built on its own proprietary software platform called LMOS, that enables it to run on almost any platform: As a KEMP LoadMaster...

CVE-2017-9249

Cross-site scripting XSS vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATHINFO to readfile.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...

CVE-2015-8477

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...

Atlassian JIRA Server Cross-Site Scripting Vulnerability

Atlassian JIRA Server is a defect tracking management system. A cross-site scripting vulnerability exists in Atlassian JIRA Server, which can be exploited by remote attackers to inject malicious script or HTML code to obtain sensitive information or hijack user sessions...

PT-2017-16178 · Mcafee · Mcafee Network Data Loss Prevention

Name of the Vulnerable Software and Affected Versions: McAfee Network Data Loss Prevention NDLP versions 9.3.x Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via HTTP response headers. This can be exploited by injecting malicious code into the HTTP...

Cross-Site Scripting (XSS)

atlas-dashboardv2 is vulnerable to reflected cross-site scripting XSS attacks. The search function does not sanitize the search queries that are passed to the application, allowing a malicious user to inject and execute arbitrary javascript...

CVE-2016-7840

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...

Cross-site Scripting (XSS)

airflow is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the markup before rendering, allowing a malicious user to inject and execute arbitrary javascript...

MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-04990)

MantisBT is the MantisBT team of a Web-based open source defect tracking system . MantisBT suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack...

CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

CVE-2017-5938

Cross-site scripting XSS vulnerability in the navpath function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the navdata name...

Improper access control

Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...

CVE-2016-8012

Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...