FortiManager (Series) - Multiple Web Vulnerabilities

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Bulletin:...

FortiAnalyzer & FortiManager - CS Cross Site Vulnerability

Document Title: =============== FortiAnalyzer & FortiManager - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1686 Fortinet PSIRT ID: 1624489 Bulletin:...

FortiManager Script Insertion

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Release Notes 1:...

FortiManager (Series) - Multiple Web Vulnerabilities

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Bulletin:...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.7 update (Moderate) (RHSA-2016:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0597 advisory. - tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-0230 - EAP: HTTPS NIO connector uses no timeout when...

Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities

Document Title: =============== Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1824 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID:...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Multiple persistent XSS in ProjectSend Discovery Date: 2016/02/19 Public Disclosure Date: 2016/03/17 Exploit Author: Michael Helwig Contact: https://twitter.com/c0dmtr1x Project Homepage: http://www.projectsend.org/ Software Lin...

ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities

ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: Multiple persistent XSS in ProjectSend Discovery Date: 2016/02/19 Public Disclosure Date: 2016/03/17 Exploit Author: Michael Helwig Contact: https://twitter.com/c0dmtr1x Project Homepage: http://www.projectsend.org/...

ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple persistent XSS in ProjectSend Discovery Date: 2016/02/19 Public Disclosure Date: 2016/03/17 Exploit Author: Michael Helwig Contact: https://twitter.com/c0dmtr1x Project Homepage: http://www.projectsend.org/ Software Link: http://www.projectsend.org/download/108/ Version:...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability

Secure Data Space version 3.1.1-2 suffers from a cross site scripting vulnerability. Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site ScriptingCWE-79 Date found: 2015-09-30 Date published...

NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability

Document Title: =============== NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1608 Release Date: ============= 2015-09-23 Vulnerability Laboratory ID VL-ID: ====================================...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

Apple Consultants - Client Side Cross Site Vulnerability

Document Title: =============== Apple Consultants - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1533 Apple ID: 624519287 Release Date: ============= 2015-08-12 Vulnerability Laboratory ID VL-ID:...

Apple Consultants - Client Side Cross Site Vulnerability

Document Title: =============== Apple Consultants - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1533 Apple ID: 624519287 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...

search.wlbz2.com XSS vulnerability

Open Bug Bounty ID: OBB-63467 Description| Value ---|--- Affected Website:| search.wlbz2.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Yahoo eMarketing Bug Bounty #31 - Cross Site Vulnerability

Document Title: =============== Yahoo eMarketing Bug Bounty 31 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1491 Yahoo Security ID H1: 55395 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID:...