CVE-2023-0867

OpenNMS Meridian and Horizon are affected by multiple stored and reflected cross-site scripting (XSS) vulnerabilities in webapp jsp pages. The root cause involves insecure handling in the web-facing components, exposing the potential to access confidential session information. Affected software i...

Joomla! 4.0.0 < 4.2.8 Broken Access Control

A broken access control allows unauthorized access to webservice endpoints allowing access to sensitive information such as database login information. No source data...

kriea2.webtool.co.kr Cross Site Scripting vulnerability OBB-3197580

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

In an ideal world, security and development teams would be working together in perfect harmony. But we live in a world of competing priorities, where DevOps and security departments often butt heads with each other. Agility and security are often at odds with each other— if a new feature is...

SUSE CVE-2020-22669

Modsecurity owasp-modsecurity-crs 3.2.0 Paranoia level at PL1 has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications...

oia.cau.ac.kr Cross Site Scripting vulnerability OBB-3187682

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3083

All versions of Landis+Gyr E850 ZMQ200 are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie...

CVE-2022-3083

CVE-2022-3083 affects all versions of Landis+Gyr E850 (ZMQ200). The vulnerability is CWE-784: Reliance on Cookies Without Validation and Integrity, where web application navigation depends on the session cookie value; an attacker changing cookie values could render the web interface inaccessible....

PT-2023-13020 · Landis+Gyr · Landis+Gyr E850

Name of the Vulnerable Software and Affected Versions: Landis+Gyr E850 ZMQ200 versions all Description: The device's web application navigation depends on the value of the session cookie. If an attacker changes the session cookie values, the web application could become inaccessible for the user...

Session Fixation in https://demo.froxlor.org/

Description The session ID not rotating even after relogin POC 1. Change the PHPSESSID=newsessionchanged and then login 2. Use the same session into new browser and as you can see logged into the account 3. you can try logout and login again the PHPSESSID doesn't change. Video POC:...

CVE-2022-2658 WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Top 5 Web App Vulnerabilities and How to Find Them

Web applications, often in the form of Software as a Service SaaS, are now the cornerstone for businesses all over the world. SaaS solutions have revolutionized the way they operate and deliver services, and are essential tools in nearly every industry, from finance and banking to healthcare and...

Unauthorized Access Vulnerability in Qixing Tianqing WEB Application Security Gateway

Qixing Tianqing Web Application Security Gateway is a Web Application Security Gateway of Qixing Information Technology Group Co. An unauthorized access vulnerability exists in Qixing Tianqing Web Application Security Gateway, which can be exploited by attackers to obtain sensitive information...

CVE-2022-38379

Fortinet FortiSOAR is affected by CVE-2022-38379 (CWE-79): improper neutralization of input during web page generation, enabling an authenticated attacker to inject HTML tags through input fields in FortiSOAR versions 7.0.0–7.0.3 and 7.2.0. The connected documents confirm the vulnerability in For...

Helmet Store Showroom 1.0 SQL Injection Exploit

Exploit Title: Helmet Store Showroom 1.0 - authenticated SQL Injection Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/15851/helmet-store-showroom-site-php-and-mysql-free-source-code.html Version: 1.0 Tested on: Windows 10 +...

oldoakgdr.it Cross Site Scripting vulnerability OBB-3071521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-44787

CVE-2022-44787 affects Maggioli Maggioli SpA Appalti & Contratti, version 9.12.2. The vulnerability is a reflected Cross-Site Scripting (XSS) in the web application where the idPagina parameter is reflected in the server response without HTML encoding, allowing/script injection when a user intera...

CVE-2022-44785

CVE-2022-44785 affects Maggioli Maggioli SpA Appalti & Contratti v9.12.2. The vulnerability class is SQL injection in multiple parameters, with at least one instance operable by unauthenticated users (notably cfamm in GetListaEnti.do). Reports from multiple sources (Red Hat, NVD, CVE/CVE list, PT...

CVE-2022-43135

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

Cross-Site Request Forgery (CSRF)

Concrete CMS is vulnerable to cross-site request forgery. The vulnerability exists in multiple functions due to lack of checks in the State parameter for external concrete authentication service which allows an attacker to initiate unwanted actions within the web application...