Username spoofing in OnionShare

Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's Red Team lab. This is an issue from that penetration test. - Vulnerability ID: OTF-005 - Vulnerability type: Improper Input Sanitization -...

Mac Adware 'OSX.Pirrit' Unleashes Ad Overload, For Now

Researchers discovered a Mac OS X variant of the Windows-based Pirrit adware that creates a proxy server on infected Mac computers and injects ads into webpages. According to researchers at Boston-based Cybereason Labs, the adware, dubbed OSX.Pirrit, is mostly benign, serving up just ads, but has...

Front Accounting 2.3.4 CSRF Vulnerability

No description provided by source. Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested On...............Windows Vista +...

V-CMS 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested...

Nakid CMS 1.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Nakid CMS 1.0.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.nakid.org/ Discovery Date..........6/1/2011 Tested...

Kryn.cms 0.9 Cross Site Scripting

------------------------------------------------------------------------ Software................Kryn.cms 0.9 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.kryn.org/ Discovery Date..........5/19/2011 Tested...

Mollify 1.8.0.1 Cross Site Scripting

------------------------------------------------------------------------ Software................Mollify 1.8.0.1 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.mollify.org/ Discovery Date..........5/19/2011 Tested...

Room Juice 0.3.3 Cross Site Scripting

------------------------------------------------------------------------ Software................Room Juice 0.3.3 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://grecni.com/roomjuice/ Discovery Date..........5/17/2011 Tested...

allocPSA 1.7.4 Cross Site Scripting

------------------------------------------------------------------------ Software................allocPSA 1.7.4 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/allocpsa/ Discovery Date..........5/12/201...

docMGR 1.1.2 Cross Site Scripting

------------------------------------------------------------------------ Software................docMGR 1.1.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.docmgr.org/ Discovery Date..........5/12/2011 Tested...

openQRM 4.8 Cross Site Scripting

------------------------------------------------------------------------ Software................openQRM 4.8 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.openqrm.com/ Discovery Date..........5/14/2011 Tested...

Ampache 3.5.4 Cross Site Scripting

------------------------------------------------------------------------ --Description-- A reflected cross-site scripting vulnerability in Ampache 3.5.4 can be exploited to execute arbitrary JavaScript. --PoC-- alert0" /...

ECoder 0.4.10 Cross Site Scripting

------------------------------------------------------------------------ Software................ECoder 0.4.10 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://ecoder.quintalinda.com/ Discovery Date..........5/5/2011 Tested...

Gelsheet 1.02 Cross Site Scripting

------------------------------------------------------------------------ Software................Gelsheet 1.02 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.gelsheet.org/ Discovery Date..........5/5/2011 Tested...

LDAP Account Manager 3.4.0 Cross Site Scripting

------------------------------------------------------------------------ Software................LDAP Account Manager 3.4.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.ldap-account-manager.org/ Discovery...

Time And Expense Management System Cross Site Scripting

------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/tems/ Discovery...

WebAuction 0.3.6 Cross Site Scripting

------------------------------------------------------------------------ Software................WebAuction 0.3.6 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://apps.weblite.ca/index.php?-action=view&-table=packages&packageid=...

webERP 4.03.08 Cross Site Scripting

------------------------------------------------------------------------ --Description-- A reflected cross-site scripting vulnerability in webERP 4.03.8 can be exploited to execute arbitrary JavaScript. --PoC-- alert0" /...

phpmychat plus 1.93 - Multiple Vulnerabilities

phpmychat plus 1.93 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5...

phpMyChat Plus 1.93 Cross Site Scripting

------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/phpmychat/ Discovery...