Liberscol Reflective Cross-Site Scripting Vulnerability

Liberscol is a French open source digital teaching platform. A reflective cross-site scripting vulnerability exists in the error parameter of Login/jsp in the 2013-09-20 version of Liberscol, which can be used by an attacker to inject malicious scripts...

Joomla jVoteSystem 2.56 Component parameter keyword XSS vulnerability

0x01 vulnerability profile Joomla jVoteSystem 2.56 Component parameters keyword the presence of a reflective XSS vulnerability. 0x02 vulnerability analysis http://www.9u4u.be/index.php?option=comjvotesystem&view=polls&cat=cw&keyword=1&Itemid=12jvotesystem Construct the following payload: 1"...

plone reflective cross-site scripting vulnerability (CNVD-2016-07278)

Plone is a free, open source Content Management System CMS. Plone suffers from a reflected cross-site scripting vulnerability that allows an attacker to inject potential cross-site scripting attacks into forms...

Reflective Cross-site Scripting Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A reflective cross-site scripting vulnerability exists in the UFIDA NC-IUFO Reporting System. The vulnerability allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading ...

Commercial pie ONex order management system reflective XSS

No description provided by source...

Microsoft Windows 7 SP1 - mrxdav.sys WebDav Privilege Escalation (MS16-016)

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Microsoft Windows 7 SP1 - 'mrxdav.sys' WebDAV Privilege Escalation (MS16-016) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'MS16-016 mrxdav.sys WebDav Local Privilege Escalation',...

Dolibarr CRM Cross Site Scripting

Exploit Title: Dolibarr CRM alert Search criteria ' alert ' into fields Third party name, Alias name, Custom…...

Vicidial 2.11 Cross Site Scripting

Exploit Title: Vicidial 2.11 - Reflective XSS Date: 0 day Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link: https://sourceforge.net/projects/astguiclient/files/astguiclient2.11rc1.zip/download Platorm: PHP Vicidial i...

Cisco EPC 3928 - Multiple Vulnerabilities

Cisco EPC 3928 - Multiple Vulnerabilities Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 / CVE-2016-1337...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

AVAST (Shop) #18 - Multiple Client Side XSS Vulnerabilities

Document Title: =============== AVAST Shop 18 - Multiple Client Side XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1635 Release Date: ============= 2016-05-25 Vulnerability Laboratory ID VL-ID: ====================================...

Reflective XSS Vulnerability in EasyCMS Enterprise Marketing Management System Administration Backend

EasyCMS is a web content management system based on PHP+Mysql architecture. A reflective XSS vulnerability exists in the administration backend of the EasyCMS enterprise marketing management system, which can be exploited by an attacker to submit data with js code on the personal information page...

PivotX cross-site scripting vulnerability (CNVD-2016-03594)

Pivotx is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A reflective cross-site scripting vulnerability exists in PivotX 2.3.11. An attacker can inject JavaScript code or bypass CSRF protection...

PT-2016-4163 · Ibm +2 · Ibm Sdk +3

Name of the Vulnerable Software and Affected Versions: IBM SDK, Java Technology Edition versions 6.0.0 through 6.0.16.24 IBM SDK, Java Technology Edition 6 R1 versions 6.1.0 through 6.1.8.24 IBM SDK, Java Technology Edition 7 versions 7.0.0 through 7.0.9.39 IBM SDK, Java Technology Edition 7 R1...

Run Binaries From Memory: Pazuzu

Pazuzu is a Python script that allows you to embed a binary within a precompiled DLL which uses reflective DLL injection. The goal is that you can run your own binary directly from memory. This can be useful in various scenarios. For example, if you want to exploit a vulnerability and run your ow...

TOTVS RM PORTAL Cross Site Scripting

TOTVS RM PORTAL Educational - Multiple Cross Site Scripting Vulnerabilities Product web page: www.totvs.com.br Author: vesp3r Email: [email protected] Published: 13/02/2016 Vendor Product Description TOTVS pronounced Totus is a Brazilian software company, with headquarters in Sao Paulo. TOTVS w...

Viprinet Multichannel VPN Router 300 Cross Site Scripting

Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300 CVE: CVE-2014-2045 Vendor: Viprinet Product: Multichannel VPN Router 300 Affected version: 2013070830/2013080900 Fixed version: 2014013131/2014020702 Reported by: Tim Brown Details: The data...

Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting

Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300 CVE: CVE-2014-2045 Vendor: Viprinet Product: Multichannel VPN Router 300 Affected version: 2013070830/2013080900 Fixed version: 2014013131/2014020702 Reported by: Tim Brown Details: The data...

Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting

Exploit for hardware platform in category web applications Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300 CVE: CVE-2014-2045 Vendor: Viprinet Product: Multichannel VPN Router 300 Affected version: 2013070830/2013080900 Fixed version:...