sns-park.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1187512 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

File upload vulnerability in 5iSNS content payment system

5iSNS Labs is dedicated to providing a source code for webmasters, with a new version of the system, covering features such as libraries and posts. A file upload vulnerability exists in the 5iSNS content payment system, which can be exploited by an attacker to obtain webmaster privileges...

SQL injection vulnerability in OpenSNS In***.class.php file

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. An SQL injection vulnerability exists in the OpenSNS In.class.php file, which can be exploited by attackers to obtain sensitive information...

Stored Cross-Site Scripting Vulnerability in OpenSNS_v6.0

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A stored cross-site scripting vulnerability exists in OpenSNSv6.0. An attacker can insert malicious js code into a page to obtain user cookies and...

CVE-2018-20850

Stormshield Network Security versions 2.0.0–2.13.0 and 3.0.0–3.7.1 contain a self‑XSS vulnerability in the SNS web server's command‑line interface. The issue stems from a lack of proper validation in the web application, enabling local attackers to trigger client‑side script execution. No remedia...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

Monitoring AWS Golden AMI Pipelines with Slack

If your company uses Slack and is looking for ways to easily monitor activities in its AWS Golden AMI Pipeline, you can use AWS native services to send messages into a Slack channel. This can give your teams better visibility into the approval process for the candidate AMIs that they submit, as...

Design/Logic Flaw

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003063

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003063

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003063

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003063

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003063

CVE-2019-1003063 affects the Jenkins Amazon SNS Build Notifier Plugin. The vulnerability arises because the plugin stores credentials unencrypted in the global configuration file on the Jenkins master, specifically in the org.jenkinsci.plugins.snsnotify.AmazonSNSNotifier.xml, which can be viewed ...

biblioteca.sns.gov.pt XSS vulnerability

Open Bug Bounty ID: OBB-700328 Description| Value ---|--- Affected Website:| biblioteca.sns.gov.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

ZTE ZXCDN-SNS SQL Injection Vulnerability

ZTE ZXCDN-SNS is a hardware device from ZTE Corporation ZTE, China. A SQL injection vulnerability exists in ZTE ZXCDN-SNS versions prior to 4.01.01. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the help of the 'aoData' parameter to disclose information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

Sql injection

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

ZTE ZXCDN-SNS is affected by an SQL injection in the aoData parameter. In versions prior to 4.01.01, a remote attacker can exploit improper input handling to execute arbitrary SQL commands, leading to disclosure of database contents. Root cause: unsafely crafted input in aoData enables SQL statem...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...