6885 matches found
Joomla JS Jobs 1.2.0 Cross Site Request Forgery
Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com Software Link:...
PT-2018-9741
Name of the Vulnerable Software and Affected Versions: phpMyAdmin version 4.8.0 Description: The issue allows an attacker to execute arbitrary SQL statements due to a CSRF problem, related to files such as js/db operations.js, js/tbl operations.js, libraries/classes/Operations.php, and sql.php...
CVE-2018-1325
In Apache wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...
CVE-2018-1325
In Apache wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...
CVE-2018-1325
CVE-2018-1325 affects the Wicket-JQuery-UI integration. In versions ≤ 6.29.0, ≤ 7.10.1, and ≤ 8.0.0-M9.1, JavaScript code created in the WYSIWYG editor can be executed on display, enabling cross-site scripting (XSS) as described in multiple sources. The connected documents corroborate an XSS risk...
chakra: Crash in Js::JavascriptArray::GetNextIndex
Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5154384812965888 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdd5d452000 Crash State: Js::JavascriptArray::GetNextIndex...
Joomla JS Jobs 1.2.0 Component - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com...
PT-2018-11717
Name of the Vulnerable Software and Affected Versions wicket-jquery-ui versions 6.29.0 and earlier wicket-jquery-ui versions 7.10.1 and earlier wicket-jquery-ui versions 8.0.0-M9.1 and earlier Description The issue allows JS code created in a WYSIWYG editor to be executed on display. This can lea...
CVE-2018-1325: Improper Neutralization of Input During Web Page Generation
In Apache wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...
Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery
Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage:...
Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery
Exploit Title: Joomla! Component Js Jobs - Multiple Cross Site Request Forgery Vulnerabilities Google Dork: N/A Date: 17-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com Software Link:...
CVE-2018-10107
D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php...
Design/Logic Flaw
D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php...
CVE-2018-10108: Improper Neutralization of Input During Web Page Generation
D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the Treturn parameter to /htdocs/webinc/js/bscsmsinbox.php...
Multiple Auth0 Library Cross-Site Request Forgery Vulnerabilities
Auth0.js is a client-side library for Auth0, and Lock is an embeddable login form for desktops, tablets, and mobile devices. A cross-site request forgery vulnerability exists in Auth0 Lock 10 and auth0.js 8, which can be exploited by a remote attacker constructing a malicious website to perform...
Joomla JS Jobs 1.2.0 Cross Site Scripting
Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link: https://www.joomsky.com/5/download/1.html...
Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting
Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html...
Joomla JS Jobs 1.2.0 Component - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link:...
Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting
Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link: https://www.joomsky.com/5/download/1.html...