Castle Rock Computing SNMPc Online Cross-Site Scripting Vulnerability

Castle Rock Computing SNMPc Online is an advanced reporting plug-in for SNMPc Enterprise Network Manager from Castle Rock Computing, USA. A cross-site scripting vulnerability exists in Castle Rock Computing SNMPc Online. The vulnerability stems from a lack of proper validation of client data by t...

Imperva is a Leader in the Forrester Wave: Web Application Firewalls, Q1

Web application firewalls continue to be a core technology function for securing critical assets, and for IT professionals, market analyst reports and validation are critical when deciding upon new WAF solutions. That’s why we’re proud to share that Imperva Cloud WAF has recently been recognized ...

Plat'Home EasyBlocks IPv6 Cross-Site Request Forgery Vulnerability

Plat'Home EasyBlocks IPv6 is an IPv6 address set allocation unit product from Plat'Home Japan. A cross-site request forgery vulnerability exists in Plat'Home EasyBlocks IPv6 version 2.0.1 and earlier. The vulnerability stems from a WEB application that does not adequately verify that a request is...

vodoley2010.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136348 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

dondeverlo.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136189 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting dondeverlo.com website and...

WordPress WP Lead Plus X Cross-Site Scripting Vulnerability (CNVD-2020-22307)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WP Lead Plus X is a page builder that supports building login and other pages. A cross-site scripting vulnerability exists i...

HMS Networks eWON Flexy and eWON Cosy Cross-Site Scripting Vulnerabilities

HMS Networks eWON Flexy and HMS Networks eWON Cosy are both products of the Swedish company HMS Networks.HMS Networks eWON Flexy is an industrial VPN router.HMS Networks eWON Cosy is a gateway product for remote access. A cross-site scripting vulnerability exists in the HMS Networks eWON Flexy an...

OpenMRS <= 2.9.0 Multiple Vulnerabilities

OpenMRS is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Bundeswehr Karriere - Cross Site Scripting Vulnerability

Document Title: =============== Bundeswehr Karriere - Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2197 Video: https://www.youtube.com/watch?v=NOtAjlFkS3w Article:...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-25586)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

MediaWiki 1.31.x < 1.31.7, 1.33.x < 1.33.3 and 1.34.0 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Redmine project and task management web application, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

athen-gornau.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133596 Security Researcher metamorfosec Helped patch 1959 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting athen-gornau.de websi...

SQL Injection Vulnerability in Stone Technology Online Exam System

Stone Technology Online Exam System is a php/mysql based exam management system. Stone Technology Online Exam System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Firmware Analysis and Comparison Tool Cross-Site Scripting Vulnerability

Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. A cross-site scripting vulnerability exists in Firmware Analysis and Comparison Tool FACT version 3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

13enforme CMS SQL Injection / Cross Site Scripting

Exploit Title: 13enforme CMS SQL Injection & XSS Vulnerability Google Dork:intext:"13enForme" +inurl:.php?id= Date: 2020-04-03 Exploit Author: @ThelastVvV Vendor Homepage: http://www.13enforme.com Version: 1 Tested on: Ubuntu --------------------------------------------------------- PoC 1: The...

Arbitrary File Read Vulnerability in TRS WAS at TORS Information Technology Inc.

TORS Information Technology Co. is a provider of artificial intelligence and big data technology and data services. An arbitrary file read vulnerability exists in the TRS WAS of TORS Information Technology Co. that can be exploited by an attacker to obtain sensitive information...

DrayTek Vigor2700 Series < 2.8.4 Javascript Injection Vulnerability

Multiple DrayTek Vigor Routers are prone to a javascript injection vulnerability. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as publish...

ManageEngine Desktop Central < 10 Build 10.0.515 Information Disclosure

The ManageEngine Desktop Central application running on the remote host is prior to version 10 build 10.0.515. It is, therefore, affected by an information disclosure vulnerability in the PDFGenerationServlet component due to improper access controls. An unauthenticated, remote attacker can explo...

pfSense 'User Manager' Cross-Site Scripting Vulnerability

pfSense is a set of network firewalls based on FreeBSD Linux. A cross-site scripting vulnerability exists in pfSense 'User Manager'. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-si...