boardmanmotors.com XSS vulnerability

Vulnerable URL: http://www.boardmanmotors.com/inventory?vehicletype=RV...

Sivann ITDB 'examples_support/editable_ajax.php' cross-site scripting vulnerability

Sivann ITDB is a web-based asset inventory management tool for storing information about assets in an office environment. A cross-site scripting vulnerability exists in Sivann ITDB 'examplessupport/editableajax.php'. Because user input is not validated, an attacker could exploit the vulnerability...

Revive Adserver: Reflected XSS on Zones > Invocation Code

"Cricetinae" : This report is similar to my earlier report: 170156. Short Description The Close text parameter in Inventory Zone Invocation Code is vulnerable to Cross-Site Scripting vulnerability. Steps to Reproduce 1. Logon or Work as an agent. 2. Navigate to Inventory Zones Invocation Code...

How to Change Credentials for a Shared Folder in a File to Tape Job

Purpose This article documents how to change credentials used to connect to a UNC path added to a File Backup to Tape job. Solution To add an SMB share to a File Backup to Tape job, the SMB share must be added in the Inventory view under File Shares SMB Shares section. To change which credentials...

HPE Discovery and Dependency Mapping Inventory Arbitrary Command Execution Vulnerability

HPE Discovery and Dependency Mapping Inventory DDMi is a Hewlett Packard Enterprise HPE solution for automating the discovery and logging of client device information to help IT departments manage and control costs and risks. Apache Commons Collections ACC is a U.S. Apache Apache Software...

CVE-2016-4369

HPE Discovery and Dependency Mapping Inventory DDMi 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

CVE-2016-4369: Improper Access Control

HPE Discovery and Dependency Mapping Inventory DDMi 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

[SECURITY] Fedora 22 Update: glpi-0.90.3-1.fc22

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

Design/Logic Flaw

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The CVE-2016-2202 issue affects Symantec ITMS (Inventory Solution component in the Management Agent on the client). The vulnerability allows a local user to bypass the inventory’s application-denial/blacklist functionality, effectively bypassing policy to run unauthorized applications. The root c...

CVE-2016-2202: Undefined Security Weakness

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

[SECURITY] Fedora 24 Update: glpi-0.90.3-1.fc24

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

OCS Inventory NG SQL Injection Vulnerability

OCS Inventory NG Open Computer and Software Inventory Next Generation is a system management software that helps administrators keep track of computer software installations and configurations, and enables low network traffic communication between HTTP proxies and servers. OCS Inventory NG suffer...

Symantec ITMS Inventory Solution Application Denial Functionality Bypass

SUMMARY The Inventory Solution component of Symantecs IT Management Agent, the client portion of Symantec IT Management Suite ITMS powered by Altiris, can be configured to deny one or more applications from running on a windows managed client as part of IT management functions. A determined user...

Movie Collection & Inventory - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Movie Collection & Inventory published at the 'play' market has multiple vulnerabilities...

My Inventory (free) - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application My Inventory free published at the 'play' market has multiple vulnerabilities...

curtistrailers.com XSS vulnerability

Open Bug Bounty ID: OBB-141282 Description| Value ---|--- Affected Website:| curtistrailers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...