pass.rzd.ru XSS vulnerability

Vulnerable URL: http://pass.rzd.ru/timetable/public/ru?STRUCTUREID=735id=5370=5354num=$numberlat$=$Number2$'"--...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71664 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DrayTek VigorACS SI 1.3.0 File Write / LFI / File Upload

DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This is not so much a software vulnerability but more a configuration issue. 2.2 Unauthenticated arbitrary file read/write functionality via...

Blackboard Academic Suite 6.2.23 +/-: Persistent cross-site scripting vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I. Affected Software Blackboard Academic Suite 6.2.3.23 Prior or newer versions may also be affected. Vendor website: http://www.blackboard.com/ II. Impact Subjective: Severe Objective: Privilege escalation III. Vulnerability There is a...