calendar.eller.arizona.edu XSS vulnerability

Open Bug Bounty ID: OBB-46258 Description| Value ---|--- Affected Website:| calendar.eller.arizona.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

68kb Knowledge Base 1.0.0rc3 - Edit Main Settings CSRF

No description provided by source. Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date: 2010-04-02 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc3.zip Version: v1.0.0rc3 html body onload=document.forms'editsettings'.submit form...

Police Municipale Open Main Courante 1.01beta (RFI/LFI) Multiple File Include Vulnerability

No description provided by source. =========================================================================================== Police Municipale Open Main Courante 1.01beta RFI/LFI Multiple File Include Vulnerability...

NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept

No description provided by source. !/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basic strcpy stack...

Taboada Macronews <= 1.0 - SQLi Exploit

No description provided by source. ?php / Exploit Title: Taboada Macronews = 1.0 SQLi Exploit Date: 03rd January 2013 Exploit Author: WhiteCollarGroup Software Link: http://www.scriptbrasil.com.br/download/codigo/7144/ Version: 1.0 Google Dork: intext:Powered by: joaotaboada.com Usage: php...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0377-1)

java-170-openjdk was updated to icedtea-2.3.6 bnc803379 containing various security and bugfixes : - Security fixes - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at...

CVE-2014-2260

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

PT-2014-4590

Name of the Vulnerable Software and Affected Versions Ajenti versions 1.2.13 through 1.2.14 Ajenti version 1.2.15 is not affected, so versions prior to 1.2.15 are vulnerable. However, since 1.2.13 is the lowest version mentioned as vulnerable, the range can be simplified to: Ajenti versions 1.2.1...

CVE-2014-2286

main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote attackers to cause a denial of service stack consumption and possibly execute arbitrary code via an...

CVE-2014-2286: Improper Input Validation

main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote attackers to cause a denial of service stack consumption and possibly execute arbitrary code via an...

Localize: XSS in main page (invitation)

If a project name is saved with a XSS string such as: “!-- and a translator visits and requests and invite, it'll result in the xss executing in the main page, due to the fact that it shows your requests. Screen: http://prntscr.com/3awwuv...

Localize: XSS in main page

If a project name is saved with a XSS string such as: “!-- and a translator visits it, it'll result in the xss executing in the main page, due to the fact that it shows your recent visits. Screen: http://prntscr.com/3awwuv...

Microsoft Word TextBox Sub-document Memory Corruption - Ver2 (CVE-2007-1910)

A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to improper validation of a supplied value inside the Main Stream. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Word TextBox Sub-document Memory Corruption - Ver2 (CVE-2007-1910)

Microsoft Word is a document authoring product released by the Microsoft Corporation. A memory corruption vulnerability has been reported in Microsoft Word. The vulnerability is due to improper validation of a supplied value inside the Main Stream. A remote attacker could exploit this vulnerabili...

CVE-2014-2143

The IKE implementation in Cisco IOS 15.41T and earlier and IOS XE allows remote attackers to cause a denial of service security-association drop via crafted Main Mode packets, aka Bug ID CSCun31021...

Design/Logic Flaw

The IKE implementation in Cisco IOS 15.41T and earlier and IOS XE allows remote attackers to cause a denial of service security-association drop via crafted Main Mode packets, aka Bug ID CSCun31021...

CVE-2014-2143: Undefined Security Weakness

The IKE implementation in Cisco IOS 15.41T and earlier and IOS XE allows remote attackers to cause a denial of service security-association drop via crafted Main Mode packets, aka Bug ID CSCun31021...

PT-2014-4508

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.41T and earlier Cisco IOS XE versions prior to the fixed version Description The issue is related to the IKE implementation, which allows remote attackers to cause a denial of service by dropping security associations via...

Cross site scripting

Cross-site scripting XSS vulnerability in the Brother MFC-9970CDW printer with firmware G 1.03 and L 1.10 allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name QUERYSTRING to admin/adminmain.html, a different vulnerability than CVE-2013-2507 and...

PT-2014-4336

Name of the Vulnerable Software and Affected Versions Dokeos version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields, including the Phone, Street, Address line, Zip code, or City field to "main/auth/profile.php", the Subject field to...