CVE-2021-23196

The CVE-2021-23196 vulnerability affects Fresenius Kabi Agilia Link+ (version 3.0) where authentication and session management are implemented exclusively on the client side, leaving authentication attributes insufficiently protected. This client-side handling is identified as the root cause for ...

CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

acerosplanos.com Cross Site Scripting vulnerability OBB-2343055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

g33kyrash Online Banking System SQL注入漏洞

g33kyrash Online Banking System is an online banking system developed by g33kyrash individual developers using PHP and MySQL. g33kyrash Online Banking System is vulnerable to a SQL injection vulnerability, which stems from the fact that Online Banking System v1.0 was found to contain a SQL...

livehelperchat cross-site request forgery vulnerability (CNVD-2022-08284)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability previously existed in livehelperchat 2.0, which stemmed from a WEB application that did not adequately validate that a request was comin...

webmail.mgterraplanagem.com.br Cross Site Scripting vulnerability OBB-2342011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.planalservicos.com.br Cross Site Scripting vulnerability OBB-2341609

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Drupal 7.x < 7.86 Multiple XSS Vulnerabilities (SA-CORE-2022-002) - Linux

Drupal is prone to multiple cross-site scripting XSS vulnerabilities in jQuery UI. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

hostmaster.webdisk.fitnesports.com Improper Access Control vulnerability OBB-2340920

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-21377

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web API. Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2 and 20.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

Rocket LMS 1.1 - Persistent Cross Site Scripting Vulnerability

Exploit Title: Rocket LMS 1.1 - Persistent Cross Site Scripting XSS Document Title: =============== Rocket LMS 1.1 - Persistent Cross Site Scripting XSS Product & Service Introduction: =============================== Rocket LMS is an online course marketplace with a pile of features that helps yo...

BigBlueButton 跨站脚本漏洞

BigBlueButton is an open source web conferencing system from the BigBlueButton Bigbluebutton community. bigbluebutton suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabilit...

JavaQuarkBbs 跨站脚本漏洞

JavaQuarkBbs is a simple Java community based on Spring Boot implementation in China.JavaQuarkBBS in v2 and its previous versions suffers from a cross-site scripting vulnerability, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit thi...

livehelperchat cross-site request forgery vulnerability (CNVD-2022-08207)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate that a request is coming from a trusted...

Landa Driving School Management System 2.0.1 Arbitrary File Upload Vulnerability

Exploit Title: Landa Driving School Management System Arbitrary File Upload Version 2.0.1 Exploit Author: Sohel Yousef - email protected Software Link: https://codecanyon.net/item/landa-driving-school-management-system/23220151 Software link 2 :https://simcycreative.com/landa/ Software Demo :...

WordPress WP Booking System plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress WP Booking System plugin has a cross-site scripting vulnerability in versions prior to 2.0.15...

NUUO NVRmini 2 <= 03.11.0000.0016 RCE Vulnerability - Active Check

NUUO NVRmini 2 devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

calibre-web 安全漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in calibre-web that stems from the fact that calibre-web is prone to business logic errors...

Calibre-Web Cross-Site Scripting Vulnerability (CNVD-2022-21489)

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database.A vulnerability exists in Calibre-Web cross-site scripting that is vulnerable to incorrect neutralization of input during web page generation. No details of the vulnerability are currently...

Reprise Software Reprise License Manager Cross-Site Scripting Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...