CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

CVE-2025-8730

CVE-2025-8730 – Authentication Bypass in Belkin F9K1009/F9K1010 Author : Byte Reaper Description : This repository contains a exploit for CVE‑2025‑8730, a critical Authentication Bypass vulnerability affecting the web interface of Belkin F9K1009 and F9K1010 routers. The flaw lies in the session...

LivingLogic XIST4C 跨站脚本漏洞

XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited to conduct cross-site scripting attacks via login.htm,...

PT-2021-16962

Name of the Vulnerable Software and Affected Versions LivingLogic XIST4C versions prior to 0.107.8 Description The issue allows for cross-site scripting XSS attacks. This can be achieved through specific pages such as "login.htm", "login.wihtm", or "login-form.htm". Recommendations For versions...

CVE-2021-26123: Improper Neutralization of Input During Web Page Generation

LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm...

PT-2021-15413

Name of the Vulnerable Software and Affected Versions MERCUSYS Mercury X18G version 1.0.5 Description The issue allows Directory Traversal via ../ in conjunction with a loginLess or login.htm URI to the web server, enabling authentication bypass. This is demonstrated by the...

CVE-2020-5728

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages such as login.htm. There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting...

PT-2020-12682

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 20.1.57.1745 Description The issue allows remote unauthenticated attackers to obtain sensitive information about the server, including CPU usage, memory, Windows version, and internal statistics, by sendi...

PT-2019-19436

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor version 7.1.3.3378 Description The issue allows for XSS via the "errormsg" or "loginurl" parameter in the /public/login.htm endpoint. It is noted that this product is discontinued. Recommendations For version 7.1.3.3378,...

CVE-2019-9206: Improper Neutralization of Input During Web Page Generation

PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued...

PT-2019-14635

Name of the Vulnerable Software and Affected Versions ScadaBR version 1.0CE Description A cross-site scripting issue exists in the login form, specifically at the "/ScadaBR/login.htm" endpoint, allowing a remote attacker to inject arbitrary web script or HTML via the username or password...

CVE-2019-16344: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...

PRTG Network Monitor 7.1.3.3378 Cross Site Scripting

In 2009... !-- Exploit Title: Cross Site Scripting in PRTG Network Monitor v7.1.3.3378 Date: 17-02-2019 Exploit Author: Rafael Pedrero Vendor Homepage: http://www.paessler.com/prtg Software Link: http://www.paessler.com/prtg Version: PRTG Network Monitor v7.1.3.3378 Tested on: All CVE :...

PT-2018-1931

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 18.2.40.1683 Description The issue is related to insecure privilege management in PRTG Network Monitor, allowing remote unauthenticated attackers to create users with read-write privileges, including...

Mango Automation 2.6.0 Remote XSS POST Injection Vulnerability

Summary Mango Automation is a flexible SCADA, HMI And Automation software application that allows you to view, log, graph, animate, alarm, and report on data from sensors, equipment, PLCs, databases, webpages, etc. It is easy, affordable, and open source. Description The application is prone to a...

Mango Automation 2.6.0 User Enumeration Weakness

Summary Mango Automation is a flexible SCADA, HMI And Automation software application that allows you to view, log, graph, animate, alarm, and report on data from sensors, equipment, PLCs, databases, webpages, etc. It is easy, affordable, and open source. Description The weakness is caused due to...

PT-2014-8395

Name of the Vulnerable Software and Affected Versions OpenMRS version 2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters, including givenName, familyName, address1, address2, comment, w10, HTTP Referer Header, returnUrl, and visitId in...

dedecms 5.7 login.htm 跨站脚本漏洞

No description provided by source...

PRTG V8.1.2.1809 XSS Bugs in login.htm and error.htm

XSS Reflected Bugs in login.htm and error.htm ================================================================ PRTG V8.1.2.1809 All OS Versions: http://www.paessler.com/ I have discovered two XSS bugs within PRTG version 8.1.2.1809. These bugs are in the login.htm and error.htm documents. These...

PRTG 8.1.2.1809 Cross Site Scripting

XSS Reflected Bugs in login.htm and error.htm ================================================================ PRTG V8.1.2.1809 All OS Versions: http://www.paessler.com/ I have discovered two XSS bugs within PRTG version 8.1.2.1809. These bugs are in the login.htm and error.htm documents. These...