Joomla! 3.0.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! 3.5.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! 1.7.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

kohnlesoft.de XSS vulnerability

Open Bug Bounty ID: OBB-678969 Description| Value ---|--- Affected Website:| kohnlesoft.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

learningobjects.durhamcollege.ca XSS vulnerability

Open Bug Bounty ID: OBB-676355 Description| Value ---|--- Affected Website:| learningobjects.durhamcollege.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

matrixscience.com XSS vulnerability

Open Bug Bounty ID: OBB-675921 Description| Value ---|--- Affected Website:| matrixscience.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

venturechest.ae XSS vulnerability

Open Bug Bounty ID: OBB-675809 Description| Value ---|--- Affected Website:| venturechest.ae Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mrtimesaver.nl XSS vulnerability

Open Bug Bounty ID: OBB-675537 Description| Value ---|--- Affected Website:| mrtimesaver.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

engineering.awr.org XSS vulnerability

Open Bug Bounty ID: OBB-675501 Description| Value ---|--- Affected Website:| engineering.awr.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

orthoedition.com XSS vulnerability

Open Bug Bounty ID: OBB-675500 Description| Value ---|--- Affected Website:| orthoedition.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-16725

XSS in baijiacms V4 via the id parameter of assets/weengine/components/zclip/ZeroClipboard.swf (Non-standard use of the flash component). Affected: baijiacms V4; root cause: improper handling of the SWF component parameter; impact: cross-site scripting exposure. Remediation details are not provid...

noveauto.sk XSS vulnerability

Open Bug Bounty ID: OBB-657231 Description| Value ---|--- Affected Website:| noveauto.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pandora.ice.it XSS vulnerability

Open Bug Bounty ID: OBB-655224 Description| Value ---|--- Affected Website:| pandora.ice.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

naaldenkraak.nl XSS vulnerability

Open Bug Bounty ID: OBB-655203 Description| Value ---|--- Affected Website:| naaldenkraak.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chaturbate: Reflected XSS on ssl-ccstatic.highwebmedia.com via player.swf

Hey there, There's a SWF based XSS on ssl-ccstatic.highwebmedia.com. You may want to update/remove the file. POC https://ssl-ccstatic.highwebmedia.com/jwplayer/player.swf?playerready=alertdocument.domain Thanks, Ben Impact...

UBUNTU-CVE-2017-16890

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

mov.vic.gov.au XSS vulnerability

Open Bug Bounty ID: OBB-641306 Description| Value ---|--- Affected Website:| mov.vic.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

libming denial of service vulnerability (CNVD-2018-12759)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readBytes' function of the util/read.c file in libming version 0.4.8, which originates from a program...

gebekafilms.com XSS vulnerability

Open Bug Bounty ID: OBB-641062 Description| Value ---|--- Affected Website:| gebekafilms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Null pointer dereference

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...