4712 matches found
CVE-2018-5105
WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox 58...
AutoSQLi - An Automatic SQL Injection Tool Which Takes Advantage Of Googler, Ddgr, WhatWaf And SQLMap
An Automatic SQL Injection Tool Which Takes Advantage Of DorkNet Googler, Ddgr, WhatWaf And Sqlmap. Features Save System - there is a complete save system, which can resume even when your pc crashed. - technology is cool Dorking - from the command line one dork : YES - from a file: NO - from an...
cgminer and bfgminer buffer overflow vulnerability
Both cgminer and bfgminer are bitcoin mining software. A stack buffer overflow vulnerability exists in addpool, failover-only, poolquota, and save command handlers in cgminer version 4.10.0 and bfgminer version 5.5.0. A remote attacker could exploit this vulnerability to execute arbitrary code...
UBUNTU-CVE-2018-10058
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers...
Design/Logic Flaw
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
ClipperCMS Cross-Site Scripting Vulnerability
ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in the 'Site Name' field of the 'site' tag under configuration in ClipperCMS version 1.3.3. A remote attacker can exploit this vulnerability by sending a specially crafted site name to the...
Code execution vulnerability in LOGA version 5.3.1
LOGA that is named "Limit Of Good AsThis" is a multi-language, multi-platform building system developed by Nuance. A code execution vulnerability exists in LOGA version 5.3.1. The vulnerability is caused by the program's failure to filter the saved content when saving configuration files, an...
save-video.com XSS vulnerability
Open Bug Bounty ID: OBB-610623 Description| Value ---|--- Affected Website:| save-video.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
save-food.de XSS vulnerability
Open Bug Bounty ID: OBB-608106 Description| Value ---|--- Affected Website:| save-food.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-10265
An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...
Cross site request forgery (csrf)
An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...
CVE-2018-10222
An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP...
Microsoft Office: Show OneDrive Sign In
This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013skydrivesignin.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Show OneDrive Sign In Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Cross site request forgery (csrf)
joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...
CVE-2018-10096
joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...