4672 matches found
Cross site request forgery (csrf)
JBoss KeyCloak is vulnerable to soft token deletion via CSRF...
CVE-2014-3655
CVE-2014-3655 affects JBoss KeyCloak; vulnerability is soft token deletion via CSRF. Notable details from connected docs indicate exposure in affected Keycloak releases and a fix later stated as Keycloak 1.0.2.Final. Practical impact is limited to CSRF-enabled token deletion without broader acces...
CVE-2014-3655
JBoss KeyCloak is vulnerable to soft token deletion via CSRF...
CVE-2014-3655: Cross-Site Request Forgery (CSRF)
JBoss KeyCloak is vulnerable to soft token deletion via CSRF...
PT-2019-7101
Name of the Vulnerable Software and Affected Versions KeyCloak versions prior to 1.0.2.Final Description The issue allows for soft token deletion via CSRF. This can potentially lead to unauthorized access or data modification. The estimated number of affected devices and real-world incidents are...
Fedora Update for bird FEDORA-2019-ace80f492e
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-15501
Reflected cross site scripting XSS in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter...
Cross site scripting
Reflected cross site scripting XSS in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter...
CVE-2019-15501
Reflected cross site scripting XSS in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter...
CVE-2019-15501
CVE-2019-15501 is a reflected cross-site scripting vulnerability in L-Soft LISTSERV prior to version 16.5-2018a. The flaw is triggered via the /scripts/wa.exe OK parameter, allowing an attacker to execute arbitrary JavaScript in the victim’s browser when the page is loaded. The CVE entry notes a ...
CVE-2019-15501: Improper Neutralization of Input During Web Page Generation
Reflected cross site scripting XSS in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter...
Best Soft Inc.(BSI) Advance Hotel Booking System Cross-Site Scripting Vulnerability
Best Soft Inc.BSI Advance Hotel Booking System is a hotel online booking system from Best Soft India. The system offers modules for hotel booking, room search and discount coupons. A cross-site scripting vulnerability exists in the bookingdetails.php script in the Best Soft Inc. BSI Advance Hotel...
BSI Advance Hotel Booking System 2.0 - (booking_details.php) Persistent Cross-Site Scripting Vulnera
Exploit for php platform in category web applications Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Exploit Author: Angelo Ruwantha Vendor Homepage: http://www.bestsoftinc.com Software Link:...
BSI Advance Hotel Booking System 2.0 Cross Site Scripting
Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Date: Wed Jun 4 2014 Exploit Author: Angelo Ruwantha Vendor Homepage: http://www.bestsoftinc.com Software Link:...
BSI Advance Hotel Booking System 2.0 - booking_details.php Persistent Cross-Site Scripting
BSI Advance Hotel Booking System 2.0 - bookingdetails.php Persistent Cross-Site Scripting Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Date: Wed Jun 4 2014 Exploit Author: Angelo Ruwantha Vendor...
Nature Easy Soft Network Technology ZenTao Cross-Site Scripting Vulnerability
Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management and other...
CVE-2019-2831
Vulnerability in the PeopleSoft Enterprise FIN Project Costing component of Oracle PeopleSoft Products subcomponent: Projects. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
ALPINE-CVE-2019-13616
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...