340 matches found
DEBIAN-CVE-2017-18123
The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...
PT-2017-14520
Name of the Vulnerable Software and Affected Versions SAP Business Intelligence Promotion Management Application versions 4.10 through 4.30 Description The issue is related to a Cross-Site Scripting XSS vulnerability. This occurs because user-controlled inputs are not sufficiently encoded, allowi...
Cross-Site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The attacks exist because exception messages are not encoded to prevent from XSS attacks...
httpd: Apache HTTP Request Parsing Whitespace Defects
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a...
httpd: Apache HTTP Request Parsing Whitespace Defects
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a...
Cross-site Scripting (XSS)
github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. The attacks exist since it does not encode the content of SuggestedTokenView class to avoid the attack...
httpd: Apache HTTP Request Parsing Whitespace Defects
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a...
httpd: Apache HTTP Request Parsing Whitespace Defects
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a...
Vimeo: Vimeo Search - XSS Vulnerability [http://vimeo.com/search]
I found a XSS vulnerability in Vimeo Search. Keeping it short so that it does not go duplicate. Payload: "onmouseover=alert1 Live Demo: http://vimeo.com/search?q=%22onmouseover%3Dalert%281%29%3E Search @ http://vimeo.com/search with above payload. The culprit here is the Couch Mode feature. After...
Vimeo: Application XSS filter function Bypass may allow Multiple stored XSS
Hi, As i analysed the application behavior and the security structure, i found out that the application is using "Greedy XSS Regex filter" against XSS and removes any the whole string from ''. So i tried some basic bypass which allowed me to insert tags and other characters into the string. Here ...
LoadedCommerce7 - Systemic Query Factory Vulnerability
Loaded Commerce 7 shopping cart/online store suffers from a systemic vulnerability in its query factory, allowing attackers to circumvent user input sanitizing to perform remote SQL injection. Title: LoadedCommerce7 Systemic Query Factory Vulnerability Advisory:...
Reflected xss in the jira-gadgets-plugin getLabelGroups rest resource
The jira-gadgets-plugin LabelsResource class exposes a getLabelGroups rest resource that is vulnerable to reflected xss through the user supplied 'project' path parameter. The vulnerability is caused by building an error response message with a content type of text/html and not html encoding the...
FreeBSD : typo -- XSS (67516177-88ec-11e1-9a10-0023ae8e59f0)
Typo Security Team reports : Failing to properly encode the output, the default TYPO3 Exception Handler is susceptible to Cross-Site Scripting. We are not aware of a possibility to exploit this vulnerability without third party extensions being installed that put user input in exception messages...
OpenCollab 1.4.3 Cross Site Scripting
------------------------------------------------------------------------ Software................OpenCollab 1.4.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.opencollab.de/ Vendor Contact Date.....3/10/2011...
XSS in PDF screen
The "PDF Export Stylesheet" field is not encoded...
CVE-2008-5228: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
DEBIAN-CVE-2007-5386
Cross-site scripting XSS vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string...
Einstein <= 1.01 Local Password Disclosure Exploit (asm)
Exploit for unknown platform in category local exploits ======================================================== Einstein ENDM SADD MACRO quotedtext:VARARG EXITM ENDM .data SubKey db "Software\einstein",0 szUser db "username",0 szPass...
eXeem 0.21 Local Password Disclosure Exploit (asm)
Exploit for unknown platform in category local exploits ================================================== eXeem 0.21 Local Password Disclosure Exploit asm ================================================== ;Nothing Special other than the program doesnt encode the proxy info. .386 .model flat,...
(MSIE)A rather old trick for web server is now played on MSIE.
MSIEA rather old trick for web server is now played on MSIE. "that's all" is the end of file if you are in a hurry testedMSIEv6CN version Patch: Q312461,Q328970MS02-066 IEXPLORE.EXE file version: 6.0.2600.0000 MSHTML.DLL file version: 6.00.2600.0000 demo at...