CVE-2015-1427

creationtimestamp| type| source ---|---|--- 2015-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36337 2015-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36415 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162...

WordPress plugin WooCommerce cross-site scripting vulnerability (CNVD-2015-01281)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WooCommerce is one of the e-commerce plug-ins. A cross-site scripting vulnerability exists in WordPress WooCommerce...

Open Source Log Analysis: GoAccess

GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in nix systems . It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly. Features GoAccess parses the specified web log file and...

IBM Tivoli Endpoint Manager Web Reports Component Cross-Site Scripting Vulnerability

IBM Tivoli Endpoint Manager provides a unified, real-time visualization and implementation approach to deploying and managing patches to all endpoints. A cross-site scripting vulnerability in the Web Reports component of IBM Tivoli Endpoint Manager version 9.1.1229 prior to 9.1 can be exploited b...

CVE-2014-6113

Cross-site scripting XSS vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6113

Cross-site scripting XSS vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6113

IBM Tivoli Endpoint Manager (TEM) Web Reports component is affected by CVE-2014-6113. The vulnerability is a cross-site scripting issue in TEM 9.1 prior to 9.1.1229, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability is tied to the Web Repo...

DEBIAN-CVE-2015-1031

Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to 1 the unmap function in list.c or 2 "two additional unconfirmed use-after-free complaints made by Coverity scan." NOTE: some of these details are obtained from...

RAWR – Rapid Assessment of Web Resources

RAWR is designed to make the process of web enumeration easy and efficient by providing pertinent information in usable formats. It uses NMaplive or from file, Metasploit, Qualys, Nexpose, or Nessus scan data to target web services for enumeration, then visits each host on each port with an...

Design/Logic Flaw

ZOHO ManageEngine ServiceDesk Plus SDP before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a 1 getTicketData action to servlet/AJaxServlet or a direct request to 2 swf/flashreport.swf, 3 reports/flash/details.jsp, or 4 reports/CreateReportTable.jsp...

ManageEngine Firewall Analyzer 8.0 - Directory Traversal Cross-Site Scripting

ManageEngine Firewall Analyzer 8.0 - Directory Traversal Cross-Site Scripting ...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit...

ManageEngine Firewall Analyzer 8.0 - Directory Traversal/XSS Vulnerabilities

Exploit for hardware platform in category web applications ...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit Author: AmirHadi...

Oracle Forms and Reports Multiple Unspecified Vulnerabilities (January 2015 CPU)

Binary data oracleformsreportsjan2015cpu.nbin...

NETIKUS.NET EventSentry Cross-Site Scripting Vulnerability

NETIKUS.NET EventSentry is a set of event log management and Windows server monitoring software from NETIKUS.NET, USA. The software provides log management, network monitoring and real-time reporting. A cross-site scripting vulnerability exists in Web Reports in NETIKUS.NET EventSentry version...

CVE-2015-1180

Cross-site scripting XSS vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet...

CVE-2015-1180

Cross-site scripting XSS vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet...

CVE-2015-1180

EventSentry Web Reports (Web Reports) vulnerability CVE-2015-1180 affects version 3.1.0 (and possibly earlier) where the pageId parameter in the networktile/bullet endpoint is not properly filtered, enabling a reflected XSS via a crafted URL. The core issue is insufficient input sanitization for ...

Unspecified Vulnerability in Oracle Reports Developer

Oracle Reports Developer is a report development, design and production suite. A security vulnerability exists in Oracle Reports Developer that could be exploited by remote attackers to compromise system integrity...