catalog.ucdenver.edu XSS vulnerability

Vulnerable URL: http://catalog.ucdenver.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

epay.ucmerced.edu XSS vulnerability

Vulnerable URL: http://epay.ucmerced.edu/Help/NetHelp/default.htm?turl=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Brave Software: [iOS/Android] Address Bar Spoofing Vulnerability

Hello, I am Aaditya Purani, I would like to Report Address Bar spoofing vulnerability in Brave Browser on the IOS as well as Android Platform. All the Test have been carried out against Latest Brave Browser whose versions i have mentioned in Products affected section. Summary: Brave Browser Suffe...

PHPCMS V9 version of the background design flaws lead to arbitrary code execution vulnerability

Source link: http://www.cnbraid.com/ 0x01 background Since the default after installation requires Super administrator privileges, so the vulnerability is very tasteless, but the feeling should be in other cms, there are also, so the main share under the mining idea PS: using the test environment...

Moxa Discontinuing Vulnerable Line of ICS Devices

A vulnerability that exists in embedded computers manufactured by Moxa could allow remote authenticated users to overwrite firmware, in turn rendering the devices unusable. Moxa, a Taiwan-based networking company, announced recently that instead of patching the line of products affected by the...

CVE-2016-4500

Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access...

CVE-2016-4500

The CVE-2016-4500 entry concerns Moxa UC-7408 LX-Plus devices where remote authenticated users can write to the firmware and render a device unusable by leveraging root access. Technical details indicate missing authentication for critical function (CWE-306) enabling a firmware overwrite that is ...

PT-2016-5983

Name of the Vulnerable Software and Affected Versions Moxa UC-7408 LX-Plus affected versions not specified Description The issue allows remote authenticated users to write to the firmware, which can render the device unusable by leveraging root access. Recommendations At the moment, there is no...

CVE-2016-4500: Undefined Security Weakness

Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access...

UC Browser HD for Tablet - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application UC Browser HD for Tablet published at the 'play' market has multiple vulnerabilities...

Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability

OVERVIEW NCCIC/ICS-CERT has received information from a third party that identified a firmware overwrite vulnerability in Moxa’s UC 7408-LX-Plus device. Moxa has produced instructions to reduce exposure to this vulnerability. The Moxa UC 7408-LX-Plus device has been discontinued. This vulnerabili...

CVE-2016-1300: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

ecal-printer.ce.berkeley.edu XSS vulnerability

Vulnerable URL: http://ecal-printer.ce.berkeley.edu/pbio/uncfgdev.html?MACADDRESS=30055c181f14=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Polycom VVX-Series Business Media Phones - Path Traversal Vulnerability

Exploit for hardware platform in category web applications Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom...

Polycom VVX-Series Business Media Phones - Directory Traversal

Polycom VVX-Series Business Media Phones - Directory Traversal Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects--...

Polycom VVX-Series Business Media Phones - Directory Traversal

Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom VVX 101, 201, 300, 310, 400, 410, 500, 600, & 1500 UC...

Polycom VVX-Series Path Traversal

Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom VVX 101, 201, 300, 310, 400, 410, 500, 600, & 1500 UC...

idm.ucmerced.edu XSS vulnerability

Vulnerable URL: https://idm.ucmerced.edu/idm/idclaim/index.jsp?error=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Drupal UC Profile模块信息泄露漏洞

No description provided by source...

CVE-2015-8232

CVE-2015-8232 affects the Drupal UC Profile module (6.x-1.x) prior to version 6.x-1.3. The vulnerability arises from incomplete access checks when accessing profiles, potentially allowing remote attackers to disclose sensitive information from anonymous user profiles via unspecified vectors. The ...