625 matches found
Mail.ru: Reflected XSS in "keywords" parameter at "https://sbermarket.ru/metro/search"
Reflected XSS via GET parameter in sbermarket.ru...
CVE-2019-4603
IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295...
CVE-2019-4603
IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295...
Watch Out: Android Apps in Google Play Store Capitalizing on Coronavirus Outbreak
Preying on public fears, the ongoing coronavirus outbreak is proving to be a goldmine of opportunity for attackers to stage a variety of malware attacks, phishing campaigns, and create scam sites and malicious tracker apps. Now in a fresh twist, third-party Android app developers too have begun t...
MESSAGETAP: Who’s Reading Your Text Messages?
FireEye Mandiant recently discovered a new malware family used by APT41 a Chinese APT group that is designed to monitor and save SMS traffic from specific phone numbers, IMSI numbers and keywords for subsequent theft. Named MESSAGETAP, the tool was deployed by APT41 in a telecommunications networ...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
Design/Logic Flaw
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
CVE-2019-14976 affects iCMS 7.0.15, exposing a cross-site scripting (XSS) vulnerability in the admin panel. The issue arises via the keywords parameter in admincp.php?app=apps, enabling potentially injection of malicious client-side script. Multiple connected sources (NVD/NIST entries and Red Hat...
CVE-2018-19465
Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...
CVE-2018-19465
Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...
CVE-2019-8390
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
CVE-2018-17420
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
MacCMS Cross-Site Scripting Vulnerability
Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in the inc/config/cache.php file in Maccms version 8.0, which stems from the incorrect handling of the 'keywords' parameter in the template/paody/html/vodtype.html file and the...
Cross site scripting
Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...
CVE-2019-8410
Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...
qdPM 9.1 - 'search[keywords]' Cross-Site Scripting
=========================================================================================== Exploit Title: qdPM 9.1 - 'searchkeywords' XSS Injection CVE: CVE-2019-8390 Date: 14-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://qdpm.net Software Link:...
Fnord - Pattern Extractor For Obfuscated Code
Fnord is a pattern extractor for obfuscated code Description Fnord has two main functions: 1. Extract byte sequences and create some statistics 2. Use these statistics, combine length, number of occurrences, similarity and keywords to create a YARA rule 1. Statistics Fnord processes the file with...
razorCMS HTML Injection Vulnerability (CNVD-2019-00806)
razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. An injection vulnerability exists in razorCMS version 3.4.8. An attacker can use the 'keywords' parameter of the //page page to inject arbitrary HTM...