3943 matches found
m-pt.co.il XSS vulnerability
Open Bug Bounty ID: OBB-578243 Description| Value ---|--- Affected Website:| m-pt.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
YzmCMS Cross-Site Scripting Vulnerability
YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site scripting vulnerability exists in YzmCMS. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with the help of 'a', 'c' or 'm' parameters...
Stored cross-site scripting vulnerability in FineCMS core\M_Controller.php file
FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. A stored cross-site scripting vulnerability exists in the FineCMS core\MController.php file. The vulnerability is due to the default situation in the FineCMS message board does not handle the input...
CVE-2018-7653: Improper Neutralization of Input During Web Page Generation
In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter...
PT-2018-18187
Name of the Vulnerable Software and Affected Versions YzmCMS version 3.6 Description The issue is related to an XSS vulnerability. It affects the index.php file through the a, c, or m parameters. Recommendations For YzmCMS version 3.6, consider restricting access to the vulnerable parameters a, c...
Node.js third-party modules: [m-server] Path Traversal allows to display content of arbitrary file(s) from the server
I would like to report Path Traversal in m-server module. It allows to read content of any arbitrary file from the server where m-server is installed and run. Module module name: m-server version: 1.4.0 npm page: https://www.npmjs.com/package/m-server Module Description M-Server is a mini http...
Node.js third-party modules: [m-server] HTML Injection in filenames displayed as directory listing in the browser allows to embed iframe with malicious JavaScript code
I would like to report Stored XSS vulnerability in m-server module. m-server displays content of selected directory as HTML in the browser. However, no escape is implemented which allows malicious user to embed executable JavaScript or HTML code eg. to load HTML document into iframe element and...
PT-2018-18098
Name of the Vulnerable Software and Affected Versions Blue River Mura CMS versions prior to 7.0.7029 Description The issue allows remote attackers to execute arbitrary code via a specific approach using an m tag and /m end tag, without proper restrictions on file types or pathnames. This can be...
DEBIAN-CVE-2018-7032
webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...
m-job.ma XSS vulnerability
Open Bug Bounty ID: OBB-559445 Description| Value ---|--- Affected Website:| m-job.ma Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
m.1ba.bz XSS vulnerability
Open Bug Bounty ID: OBB-559105 Description| Value ---|--- Affected Website:| m.1ba.bz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
m-yko.net XSS vulnerability
Open Bug Bounty ID: OBB-558806 Description| Value ---|--- Affected Website:| m-yko.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
slaviste.cz XSS vulnerability
Open Bug Bounty ID: OBB-549228 Description| Value ---|--- Affected Website:| slaviste.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
m-guns.com XSS vulnerability
Open Bug Bounty ID: OBB-544231 Description| Value ---|--- Affected Website:| m-guns.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of the development environment for CX-Programmers and microprogramming software of PLC Omron CJ2M and Omron CJ2H, related to the transmission of passwords in an open manner, allows attackers to intercept the passwords.
The vulnerability of the development environment CX-Programmer, which is part of the CX-One software suite designed for programming and configuring Omron PLCs, as well as Omron microcontrollers like CJ2M and CJ2H, stems from the transmission of passwords in an open manner. Exploiting this...
CVE-2017-13226
An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03149184...
stke.sciencemag.org XSS vulnerability
Open Bug Bounty ID: OBB-511897 Description| Value ---|--- Affected Website:| stke.sciencemag.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
(RHSA-2018:0045) Important: rhvm-appliance security update
The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Security Fixes: An industry-wide issue was found in the way many modern microprocessor designs have...
m-standard.co.jp XSS vulnerability
Open Bug Bounty ID: OBB-455034 Description| Value ---|--- Affected Website:| m-standard.co.jp Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...