Apache Tomcat 7.0.0 < 7.0.94 Remote Code Execution on Windows

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 or 7.0.0 to 7.0.93. It is, therefore, affected by a remote code execution vulnerability when running on Windows with enableCmdLineArguments enabled due to a bug in the way the JRE passes command line...

macOS 10.13.x < 10.13.6 Multiple Vulnerabilities

Binary data 700517.prm...

macOS 10.14.x < 10.14.3 Multiple Vulnerabilities

Binary data 700521.prm...

XanXSS - A Simple XSS Finding Tool

XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: /cLIcKMe!XaNxss With XanXSS every payload is different. XanXSS wor...

EulerOS 2.0 SP5 : openssl (EulerOS-SA-2019-1145)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A microprocessor side-channel vulnerability was found on SMT e.g, Hyper-Threading architectures. An attacker running a malicious process on the...

Google Chrome < 72.0.3626.81 Multiple Vulnerabilities

Binary data 700482.pasl...

WordPress Debug Mode

The web server on the remote host allows read access to WordPress debug file /wp-content/debug.log which contains debugging information such as PHP notices, warnings and errors. That means WordPress debug mode is enabled or if disabled log file has not been deleted. A remote attacker can exploit...

Drupal 8.5.x < 8.5.8 / 8.6.x < 8.6.2 Open Redirect

The instance of Drupal running on the remote web server is affected by an open redirect vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted URL, to redirect a victim from an intended legitimate website to an arbitrary website, thereby exposing the users to...

lu-enum NSE Script

Attempts to enumerate Logical Units LU of TN3270E servers. When connecting to a TN3270E server you are assigned a Logical Unit LU or you can tell the TN3270E server which LU you'd like to use. Typically TN3270E servers are configured to give you an LU from a pool of LUs. They can also have LUs se...

Drupal 8.6.x < 8.6.13 Cross-Site Scripting

According to its self-reported version number, the detected Drupal application is affected by a cross-site scripting XSS vulnerability in File module/subsystem due to improper sanitization of data in uploaded files. Note that the scanner has not tested for these issues but has instead relied only...

Flash Player < 27.0.0.187 Multiple Vulnerabilities (APSB17-33)

Binary data 700427.prm...

FreeBSD : PowerDNS -- Insufficient validation in the HTTP remote backend (6001cfc6-9f0f-4fae-9b4f-9b8fae001425)

PowerDNS developers report : An issue has been found in PowerDNS Authoritative Server when the HTTP remote backend is used in RESTful mode without post=1 set, allowing a remote user to cause the HTTP backend to connect to an attacker-specified host instead of the configured one, via a crafted DNS...

PHP 7.1.x < 7.1.27 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.27 or 7.2.x prior to 7.2.16 or 7.3.x prior to 7.3.3. It is, therefore, affected by multiple vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the...

SQLi scanner

Binary data sqliscanner.nbin...

HTMLy 2.7.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage:...

HTMLy 2.7.4 Cross Site Scripting

Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage: https://github.com/danpros/htmly Vulnerability: Cross-Site...

GetSimpleCMS 3.3.13 Open Redirect

Open Redirection Vulnerability in GetSimpleCMS 3.3.13 Information -------------------- Advisory by Netsparker Name: Open Redirection Vulnerability in GetSimpleCMS Affected Software: GetSimpleCMS Affected Versions: 3.3.13 Homepage: http://get-simple.info/ Vulnerability: Open Redirection Severity:...

WeBid 1.2.2 Cross Site Scripting

Multiple Reflected Cross-site Scripting Vulnerabilities in WeBid 1.2.2 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting Vulnerabilities in WeBid 1.2.2 Affected Software: WeBid Affected Versions: 1.2.2 Homepage: http://www.webidsupport.com/...

Collabtive 3.1 Cross Site Scripting

Reflected Cross-site Scripting Vulnerability in Collabtive 3.1 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Collabtive 3.1 Affected Software: Collabtive Affected Versions: 3.1 Homepage: https://www.collabtive.com/ Vulnerability: Reflected...

Podcast Generator 2.7 Cross Site Scripting

Stored Cross-site Scripting Vulnerability in Podcast Generator 2.7 Information -------------------- Advisory by Netsparker Name: Stored Cross-site scripting in Podcast Generator 2.7 Affected Software: Podcast Generator Affected Versions: 2.7 Homepage: http://www.podcastgenerator.net/ Vulnerabilit...