petfinder.my XSS vulnerability

Open Bug Bounty ID: OBB-117748 Description| Value ---|--- Affected Website:| petfinder.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows VBScript Join Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

realmd security, bug fix, and enhancement update

0.16.1-5 - Revert 0.16.1-4 - Use samba by default - Resolves: rhbz1271618 0.16.1-4 - Fix regressions in 0.16.x releases - Resolves: rhbz1258745 - Resolves: rhbz1258488 0.16.1-3 - Fix regression accepting DNS domain names - Resolves: rhbz1243771 0.16.1-2 - Fix discarded patch: ipa-packages.patch...

Microsoft Windows VBScript Join Function Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code in applications using the VBScript scripting language running on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability i...

Pulse Connect Secure Secure Meeting Component Access Control Vulnerability

Pulse Connect Secure is an SSL-based VPN for businesses. Access control exists for the Pulse Connect Secure Secure Meeting component, allowing an attacker to exploit a vulnerability to join a meeting unauthorized...

RHEL 6 : kernel (RHSA-2015:0782)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

CVE-2015-2786

Technical details about CVE-2015-2786 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are described here. Monitor for updates.

CVE-2015-2786: Undefined Security Weakness

Unspecified vulnerability in MyBB aka MyBulletinBoard before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."...

Microsoft Netlogon Services Remote Forgery Vulnerability

Microsoft Windows is an operating system developed by Microsoft. The Microsoft Windows Netlogon service fails to properly establish a secure communication channel to other machines using spoofed computer names.A spoofing vulnerability exists in NETLOGON.To successfully exploit the vulnerability, ...

SUSE-SU-2015:0353-1 Security update for samba

samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...

CVE-2015-1451

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the 1 WTP Name or 2 WTP Active Software Version field in a CAPWAP Join request...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the 1 WTP Name or 2 WTP Active Software Version field in a CAPWAP Join request...

CVE-2015-1451

CVE-2015-1451 refers to multiple XSS vulnerabilities in Fortinet FortiOS 5.0 Patch 7 (build 4457) affecting the CAPWAP server. The issue allows remote authenticated users to inject arbitrary web script or HTML via the WTP Name or WTP Active Software Version fields in a CAPWAP Join request. Affect...

CVE-2015-1451

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the 1 WTP Name or 2 WTP Active Software Version field in a CAPWAP Join request...

CVE-2015-1451: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the 1 WTP Name or 2 WTP Active Software Version field in a CAPWAP Join request...

CVE-2015-0590

CVE-2015-0590 affects Cisco WebEx Meeting Center. The issue stems from improper checking of certain meeting-join parameters, allowing remote, unauthenticated attackers to enable meeting features that were explicitly disabled by the organizer, potentially exposing sensitive information. Cisco’s ad...

CVE-2015-0590: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165...

Trillian 0.73/0.74 IRC JOIN Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5765/info The Trillian IRC module does not sufficiently check bounds on JOIN commands. A malicious IRC server may potentially exploit this condition to cause a denial of service or execute arbitrary code with the privileg...

ImagoScripts Deviant Art Clone SQL Injection Vulnerability

No description provided by source. Exploit Title:ImagoScripts Deviant Art Clone SQL Injection Vulnerability Date: 4/1/2010 Author: alnjm33 Software Link: http://imagoscripts.com/index.php?act=viewProd&productId=2 it cost 50$ : first join in site site/path/index.php?mode=join then log in and this ...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...