15171 matches found
CVE-2016-2356
Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...
CVE-2016-2356
CVE-2016-2356 affects Milesight IP security cameras (through 2016-11-14). The vulnerability is a buffer overflow in the web application triggered by a long username or password, reported consistently across NVD/Red Hat/CNVD entries. Impact details in sources indicate potential memory corruption; ...
Sahi Pro 8.x Cross Site Scripting
Exploit Title: Sahi pro 8.x Reflected XSS Date: 17-06-2019 Exploit Author: x00pwn Vendor Homepage:https://sahipro.com/ Software Link:https://sahipro.com/downloads-archive/ Version: 8.0 Tested on: Linux Ubuntu / Windows 7 CVE : CVE-2019-13066 POC - The Sahi pro web-application has a script manager...
vBulletin < 5.5.5 URL Mishandling Vulnerability
vBulletin mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-39368)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-39369)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-38071)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and earlier versions, which...
Thycotic Secret Server Cross-Site Scripting Vulnerability (CNVD-2019-38073)
Thycotic Secret Server is a privileged account management solution from Thycotic USA. A cross-site scripting vulnerability exists in Thycotic Secret Server versions prior to 10.7. The vulnerability stems from the lack of proper validation of client-side data by the WEB application, and can be...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-39370)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
Celebrate Cybersecurity Awareness Month with These Tips From a Survey of 1,200 Security Pros
Held every October, National Cybersecurity Awareness Month NCSAM is a collaborative effort between government and industry meant to raise awareness about the importance of cybersecurity. NCSAM is focused largely on consumer awareness, but for cybersecurity leaders, it is also a great opportunity ...
sei.tce.rr.leg.br Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1001363 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
New Cache Poisoning Attack Lets Attackers Target CDN Protected Sites
A team of German cybersecurity researchers has discovered a new cache poisoning attack against web caching systems that could be used by an attacker to force a targeted website into delivering error pages to most of its visitors instead of legitimate content or resources. The issue could affect...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-36990)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and prior versions. The...
Totemo totemodata Cross-Site Scripting Vulnerability
Totemo totemodata is an enterprise secure file transfer solution from Totemo Switzerland. A cross-site scripting vulnerability exists in Totemo totemodata version 3.0.0b936, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker...
Intelbras IWR 1000N Cross-Site Request Forgery Vulnerability
Intelbras IWR 1000N is a wireless router from Intelbras Poland. A cross-site request forgery vulnerability exists in the Intelbras IWR 1000N. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit th...
Sangoma SBC 2.3.23-119-GA Unauthenticated User Creation Vulnerability
A remotely exploitable vulnerability exists in the 2.3.23-119-GA version of Sangoma SBC that would allow an unauthenticated user to create a privileged user on the system using the web application login interface. Description A remotely exploitable vulnerability exists in the 2.3.23-119-GA versio...
RICOH MP 501 Cross-Site Scripting Vulnerability
The RICOH MP 501 is a printer from Ricoh RICOH Japan. A cross-site scripting vulnerability exists in the add address area of the RICOH MP 501, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37878)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and earlier versions, which...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37885)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and earlier versions, which...
New & Improved Qualys WAS Burp Extension Now Available
Last year we released the initial version of the Qualys WAS Burp extension to positive reviews. Customers welcomed the ability to send Burp-identified issues into Qualys Web Application Scanning WAS for centralized viewing and reporting of automated scanner findings plus manual pen-test issues fr...