CVE-2018-12423

CVE-2018-12423 affects Synapse prior to 0.31.2. The vulnerability allows unauthorized users to hijack rooms when there is no m.room.power_levels event in force. This is described consistently across multiple sources in the connected documents. Reported impact is room hijacking due to improper han...

mediabank.me XSS vulnerability

Open Bug Bounty ID: OBB-461664 Description| Value ---|--- Affected Website:| mediabank.me Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

lealbienesraices.com XSS vulnerability

Vulnerable URL: http://www.lealbienesraices.com/si/index.php?seccion=Buscadorr"'--!...

ecu.edu XSS vulnerability

Vulnerable URL: http://www.ecu.edu/cs-dhs/nursing/personnel/profile.cfm?pid=tyndalld Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18287 VIP website status:| Yes Check ecu.edu SSL...

VirtualBox Guest-To-Host Out-Of-Bounds Write Exploit

Exploit for multiple platform in category dos / poc VirtualBox: guest-to-host out-of-bounds write via virtio-net CVE-2017-3575 This is a vulnerability that affects VirtualBox VMs that use a virtio network adapter which is a non-standard configuration. It permits the guest kernel to write up to 4G...

CVE-2017-0516

CVE-2017-0516 is described as an elevation of privilege in the Qualcomm input hardware driver that could enable a local malicious app to execute code in the kernel context on Android devices. Public sources consistently list affected products as Android with kernel versions 3.10 and 3.18; Android...

pulsenews.co.kr XSS vulnerability

Vulnerable URL: http://pulsenews.co.kr/list.php?sc=30800025%22%3E%3Csvg/onload=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 280470 VIP website...

PizzaInn Beta 3 Cross Site Scripting

Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - Stored XSS Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email :------------------------ : [email protected] Google Dork :----------------...

JonhCMS 4.5.1 - SQL Injection

JonhCMS 4.5.1 - SQL Injection Exploit Title :----------------- : JonhCMS 4.5.1 - go.php?id - SQL Injection Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 14/10/2016 Type :-------------------------- : webapps Platform :...

inegi.mx XSS vulnerability

Vulnerable URL: http://inegi.mx/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at 09.08.2016 Latest check for patch:| 09.08.2016 19:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

usbf.org XSS vulnerability

Vulnerable URL: http://usbf.org/docs/vugraphs/USBC2016/Bracket.php?stage=" Details: Description| Value ---|--- Patched:| Yes, at 08.07.2017 Latest check for patch:| 08.07.2017 12:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 585653 VIP website status:| No...

michellemalkin.com XSS vulnerability

Open Bug Bounty ID: OBB-153126 Description| Value ---|--- Affected Website:| michellemalkin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mageia: Security Advisory (MGASA-2016-0102)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fotospeed.com XSS vulnerability

Vulnerable URL: http://www.fotospeed.com/downloadForm.asp?downloadName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3913043 Google Pagerank| 4 VIP website status:|...

mart.trento.it XSS vulnerability

Vulnerable URL: http://www.mart.trento.it/search.jsp?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1973468 Google Pagerank...

CVE-2015-1038

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

CVE-2014-6580

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors...

AIX 610005 : U834703

The remote host is missing AIX PTF U834703 which is related to the security of the package bos.sysmgt.nim.spot.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Maxtrade AIO CMS LFI Vulnerabilty

Exploit for php platform in category web applications ================================= Maxtrade AIO CMS LFI Vulnerabilty ================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

Dynamic photo gallery V1.02 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Dynamic photo gallery V1.02 SQL Injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...