makeagiftn.stanford.edu XSS vulnerability

Vulnerable URL: https://makeagiftn.stanford.edu/feedback/Service/submit Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

Claydip Airbnb Clone 1.0 - Arbitrary File Upload

Exploit Title: Claydip Laravel Airbnb Clone 1.0 - Arbitrary File Upload Dork: N/A Date: 22.09.2017 Vendor Homepage: https://www.claydip.com/ Software Link: https://www.claydip.com/airbnb-clone.html Demo: https://www.claydip.com/airbnbdemo.html Version: N/A Category: Webapps Tested on:...

Deserialization of untrusted data

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...

CVE-2017-12612

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...

Google Chrome Type Obfuscation Vulnerability (CNVD-2017-31823)

Google Chrome is an open source web browser. A type obfuscation vulnerability exists in Google Chrome V8, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary code...

Google Chrome HTTPS Security Downgrade Vulnerability

Google Chrome is an open source web browser. Google Chrome has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests, weakening the security protections of HTTPS...

CVE-2017-9834

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...

gikix.com XSS vulnerability

Vulnerable URL: http://gikix.com/index.php?l=en';prompt'OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35350 VIP website status:| Yes Check gikix.com SSL connection:|...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System Submit_service Method

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system submitservice method exists SQL injection vulnerability, due to the system failed to strictly filter the parameters provided by the user. An...

The vulnerability of the Linux operating system’s DRM driver allows a violator to trigger a service failure or exert other effects.

The vulnerability of the vc4getbcl function in the VideoCore DRM driver for the Linux operating system is due to a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure or other adverse effects through a specially crafted call to...

Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...

Google Android Broadcom Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-04967)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Broadcom Wi-Fi driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

Open redirect

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

CVE-2016-10315: URL Redirection to Untrusted Site

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

Privilege escalation

Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions...

NVIDIA Windows GPU Display Driver Elevation of Privilege Vulnerability

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows. A security vulnerability exists in the 'SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual ' function implementation of nvlddmkm.sys in the NVIDIA Windows GPU Display Driver. An attacker...

CVE-2016-4311

Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...

CVE-2016-4311

Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...