Lucene search
+L

28 matches found

myhack58
myhack58
added 2018/12/18 12:0 a.m.64 views

See how I through nodejs in the SSRF full control of the aws-vulnerability warning-the black bar safety net

This is me at hackerone on a private vulnerability bonus program found a loophole, found that the use of and write the report it took me 12 and a half hours, without a break. Through this loophole, I can get to the AWS credentials, I can be completely invaded the company's Account: I now have 20...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2018/06/29 12:0 a.m.7 views

PT-2018-11527 · Zoho · Zoho Manageengine Opmanager +4

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Netflow Analyzer versions prior to build 123137 Zoho ManageEngine Network Configuration Manager versions prior to build 123128 Zoho ManageEngine OpManager versions prior to build 123148 Zoho ManageEngine OpUtils versions pri...

6.1CVSS6.2AI score0.99293EPSS
SaveExploits3References6
Prion
Prion
added 2017/03/23 8:59 p.m.21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager HDM before 4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 deviceTypeID parameter to DeviceType/getDeviceType.do; the 2 policyActionClass or 3...

3.5CVSS6AI score0.00637EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2015/01/15 12:0 a.m.6 views

Kajona Cross-Site Scripting Vulnerability

Kajona is a set of Kajona team based on PHP and MySql open source content management framework. Kajona version before 4.6.3 cross-site scripting vulnerability , allowing remote attackers to inject arbitrary web script or HTML through the indexphp operation parameter...

4.3CVSS6.1AI score0.01892EPSS
SaveExploits1References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

IBM Rational RequisitePro 7.10 ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp operation Parameter XSS

No description provided by source...

7.1AI score
SaveExploits0
Prion
Prion
added 2012/02/13 7:55 p.m.18 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the 1 domainName parameter to jsp/AddDC.jsp or 2 operation parameter to DomainConfig.do...

4.3CVSS6.1AI score0.01644EPSS
SaveExploits4References5Affected Software1
Cvelist
Cvelist
added 2010/08/23 8:0 p.m.30 views

CVE-2010-3109

Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter...

7.9AI score0.05196EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2010/08/05 12:0 a.m.17 views

Novell iPrint Client Browser Plugin operation Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Novell iPrint Client Browser Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

10CVSS7.4AI score
SaveExploits0References1
Rows per page
Query Builder