Lucene search
+L

76 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 3:06 a.m.34 views

OpenTSDB Cross-site Scripting vulnerability

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter type to the /suggest URI...

6.1CVSS1.6AI score0.00672EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:06 a.m.27 views

GHSA-86VM-8M4P-6263 OpenTSDB Cross-site Scripting vulnerability

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter type to the /suggest URI...

6.1CVSS6.4AI score0.00672EPSS
SaveExploits0References3
HackRead
HackRead
added 2021/10/09 3:18 p.m.38 views

Firefox Suggest to display sponsored ads but users can disable them

By Deeba Ahmed The company maintains that it has to help fund Firefox’s optimization/development, and therefore, it has introduced a new feature called Firefox Suggest in Firefox 93. This is a post from HackRead.com Read the original post: Firefox Suggest to display sponsored ads but users can...

1AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2021/10/08 9:54 p.m.54 views

Firefox reveals sponsored ad “suggestions” in search and address bar

Mozilla is trying a novel experiment into striking a balance between ad revenue generation and privacy protection by implementing a new way to deliver ads in its Firefox web browser—presenting them as “suggestions” whenever users type into the dual-use search and URL address bar. The advertising...

6.7AI score
SaveExploits0
OSV
OSV
added 2021/06/16 5:15 p.m.10 views

CVE-2020-22200

Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...

5.3CVSS5.8AI score0.01444EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2021/04/04 9:30 p.m.986 views

Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities

Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage C:\ Watson.exe / / /\ \ \ | | \ / / / | / |/ | ' \ \ /\ / | |...

7.8CVSS7.9AI score0.414EPSS
SaveExploits29References1
Openbugbounty
Openbugbounty
added 2019/12/04 3:48 p.m.11 views

keyword-suggest-tool.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1030626 Security Researcher Trarz Helped patch 8 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting keyword-suggest-tool.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...

0.1AI score
SaveExploits0
OSV
OSV
added 2019/09/23 12:15 p.m.6 views

UBUNTU-CVE-2019-16707

Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx...

6.5CVSS6.3AI score0.01649EPSS
SaveExploits1References3
Typo3
Typo3
added 2019/05/07 12:00 a.m.19 views

SQL Injection in extension "comsolit Suggest" (comsolit_suggest)

The extension fails to properly sanitize user input and is susceptible to SQL Injection...

7.5AI score
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
added 2018/09/17 9:44 p.m.15 views

keyword-suggest-tool.com XSS vulnerability

Open Bug Bounty ID: OBB-677603 Description| Value ---|--- Affected Website:| keyword-suggest-tool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Veracode
Veracode
added 2018/07/02 4:04 a.m.17 views

Cross-Site Scripting (XSS)

opentsdb is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through the type parameter with the /suggest URI...

6.1CVSS6AI score0.00672EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2018/07/02 12:00 a.m.9 views

OpenTSDB cross-site scripting vulnerability (CNVD-2018-13554)

OpenTSDB is a set of open source, scalable distributed time series database. A cross-site scripting vulnerability exists in OpenTSDB version 2.3.0. A remote attacker can exploit this vulnerability by sending the 'type' parameter to the /suggest URI to inject arbitrary Web script or HTML...

6.1CVSS5.9AI score0.00672EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/29 2:29 p.m.19 views

CVE-2018-13003

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...

6.1CVSS6.1AI score
SaveExploits0References1
Prion
Prion
added 2018/06/29 2:29 p.m.23 views

Design/Logic Flaw

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...

4.3CVSS5.8AI score0.00672EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/29 2:00 p.m.35 views

CVE-2018-13003

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI...

6.7AI score0.00672EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2018/06/29 12:00 a.m.8 views

PT-2018-11532 · Opentsdb · Opentsdb

Name of the Vulnerable Software and Affected Versions: OpenTSDB version 2.3.0 Description: An issue was discovered in OpenTSDB, where there is a Cross-Site Scripting XSS vulnerability in the type parameter to the "/suggest" URI. This allows for potential malicious script execution. Recommendation...

6.1CVSS5.8AI score0.00672EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2018/05/01 2:59 a.m.19 views

brm-suggest-0.brsrvr.com XSS vulnerability

Open Bug Bounty ID: OBB-610633 Description| Value ---|--- Affected Website:| brm-suggest-0.brsrvr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OSV
OSV
added 2016/02/20 1:59 a.m.10 views

UBUNTU-CVE-2016-1927

The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach...

7.5CVSS7.2AI score0.02688EPSS
SaveExploits0References3
Exploit DB
Exploit DB
added 2015/09/24 12:00 a.m.69 views

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration

!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...

5CVSS6.8AI score0.19961EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2014/10/21 2:55 p.m.5 views

CVE-2012-5243

functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request...

5CVSS5.7AI score0.02761EPSS
SaveExploits5References3
Rows per page
Query Builder