CVE-2017-6489

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data element, state, cat, id, cid passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and...

CVE-2017-6489

EPESI ≤ 1.8.1.1 contains multiple Cross-Site Scripting (XSS) flaws due to insufficient sanitization of user-supplied data (element, state, cat, id, cid) passed to the Subscribe endpoint. The identified vulnerable component is EPESI-master/modules/Utils/Watchdog/subscribe.php, which can process un...

subscribe.argusleader.com XSS vulnerability

Vulnerable URL: https://subscribe.argusleader.com/subscribe/?onSuccessRedirectURL=y%22x%60z&gps-source;=y%22x%60z...

PT-2017-9849

Name of the Vulnerable Software and Affected Versions Portable UPnP SDK aka libupnp versions prior to 1.6.21 Description The issue is related to a heap-based buffer overflow in the create url list function. This can be triggered by sending a valid URI followed by an invalid one in the CALLBACK...

mqtt-subscribe NSE Script

Dumps message traffic from MQTT brokers. This script establishes a connection to an MQTT broker and subscribes to the requested topics. The default topics have been chosen to receive system information and all messages from other clients. This allows Nmap, to listen to all messages being publishe...

mdk-arbat.ru XSS vulnerability

Vulnerable URL: http://www.mdk-arbat.ru/subscribe?MID=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99376 VIP website status:| No Check mdk-arbat.ru SSL connection:| Grade: F...

careers.gallo.com XSS vulnerability

Vulnerable URL: https://careers.gallo.com/search/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:05 GMT Vulnerability type:| XSS Vulnerability...

jobs.voith.com XSS vulnerability

Vulnerable URL: https://jobs.voith.com/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:03 GMT Vulnerability type:| XSS Vulnerability status:|...

ino.com XSS vulnerability

Vulnerable URL: https://www.ino.com/email/commentary/sign-up/subscribe.html?mktcode=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 43922 VIP website status:| Yes Check ino.com SS...

CVE-2016-2154

admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution

Exploit Title: Wordpress Plugin MailChimp Subscribe Forms - Remote Code Execution Date: 23-03-2016 Exploit Author: CrashBandicot Google Dork : inurl:/wp-content/plugins/mailchimp-subscribe-sm/ Vendor Homepage: https://fr.wordpress.org/plugins/mailchimp-subscribe-sm/ Tested on: MSWin32 Version: 1....

Paragon Initiative Enterprises: CSRF AT SUBSCRIBE TO LIST

Hello, You Have Subscribe Form At http://paragonie.us11.list-manage2.com/subscribe?u=260ff2c88e0a7e103f01ccd79&id=8ddb8569ca When We Enter Details And Click on Subscribe. We Get Following Request Just Try to Add Email 'MERGE0' And Pass the Request , Attacker can Also send that Form Request to Bur...

WordPress插件Subscribe to Comments本地文件包含漏洞

No description provided by source...

WordPress Plugin Subscribe to Comments Local File Inclusion Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Subscribe To Comments Reloaded is one of the comment subscription plugin. A local file inclusion vulnerability...

WordPress Subscribe To Comments Reloaded Plugin <= 150611 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress plugin Subscribe to Comments 'options-general.php' local file inclusion vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A local file inclusion vulnerability exists in the WordPress plugin Subscribe to Comments 'options-general.php'. Because the...

Moodle Access Information Disclosure

The vulnerability of the sub-component “tool/monitor subscribe” in the Moodle learning management system is related to code errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information due to errors in the subscription process...

tps.su XSS vulnerability

Vulnerable URL:...

WordPress Subscribe To Comments 2.1.2 LFI / Code Execution Vulnerabilities

Exploit for php platform in category web applications Details ================ Software: Subscribe to Comments Version: 2.1.2 Homepage: http://wordpress.org/plugins/subscribe-to-comments/ Advisory report:...

WordPress Subscribe To Comments 2.1.2 LFI / Code Execution

Details ================ Software: Subscribe to Comments Version: 2.1.2 Homepage: http://wordpress.org/plugins/subscribe-to-comments/ Advisory report: https://security.dxw.com/advisories/admin-only-local-file-inclusion-and-arbitrary-code-execution-in-subscribe-to-comments-2-1-2/ CVE: Awaiting...