File Upload Vulnerability in YCCMS

YCCMS is a PHP version of a lightweight website building system. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2021-59153)

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A cross-site scripting vulnerability exists in several NETGEAR products. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execu...

Mahara 19.10.2 Cross Site Scripting

Document Title: =============== Mahara v19.10.2 CMS - Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2217 Release Date: ============= 2020-04-21 Vulnerability Laboratory ID VL-ID: ====================================...

U.S. Dept Of Defense: Unrestricted file upload leads to stored xss on https://████████/

Summary: When the user want to upload a "certificate", the web app doesn't check the content-type of the file. A user can upload any kind of file binary,html,... Step-by-step Reproduction Instructions 1. Create an account at https://██████/████████/app/registration/basic-info 2. When you are...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-26976)

LJCMS is a PHP+MYSQL based, free and open source enterprise website system. LJCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Sky File v2.1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Sky File v2.1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2207 Release Date: ============= 2020-04-20 Vulnerability Laboratory ID VL-ID: ==================================== 2207...

bejoradio.fm Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147397 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bejoradio.fm website and...

Centreon Command Injection (CVE-2020-9463)

A command injection vulnerability exists in the Centreon Web Application. Successful attack may result in arbitrary command execution in the context of the server process...

Bundeswehr Karriere - Cross Site Scripting Vulnerability

Document Title: =============== Bundeswehr Karriere - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2214 Video: https://www.vulnerability-lab.com/getcontent.php?id=2197 Release Date: ============= 2020-04-18...

Information_Collection_Handbook

This is a collection of tools and resources for information gathering, specifically for penetration testing and vulnerability assessment. The repository is maintained by Qftm and is available on GitHub. The repository contains a variety of tools and scripts for gathering information about a targe...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-30686)

NETGEAR D3600 and others are products of NETGEAR USA.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerability stems from th...

NETGEAR WAC510 Cross-Site Scripting Vulnerability (CNVD-2020-27296)

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

NETGEAR WAC510 Cross-Site Scripting Vulnerability

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-27301)

The NETGEAR R8900, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in several NETGEAR products, which stems from the lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client code...

NETGEAR R9000 Cross-Site Scripting Vulnerability

The NETGEAR R9000 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR R9000 prior to version 1.0.4.26, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...

Aruba Networks ClearPass Cross-Site Scripting Vulnerability (CNVD-2020-33639)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A cross-site scripting vulnerability exists in Aruba Networks ClearPass. The vulnerability stems from a lack of proper validation of...

SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting Vulnerability

Exploit for iOS platform in category web applications Title: SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting Vendor: http://dropouts.in/ Software Link: https://apps.apple.com/us/app/super-backup-export-import/id1052684097 CVE: N/A Document Title: =============== SuperBackup v2.0.5 iOS...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-24411)

The NETGEAR RBK50, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products, which stems from a lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client-side code...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-24412)

The NETGEAR RBK50, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR RBR50 version prior to 2.3.5.30, RBS50 version prior to 2.3.5.30, and RBK50 version prior to 2.3.5.30, which stems from the lack of proper validation of client-side data ...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-26943)

NETGEAR D7800 and others are products of NETGEAR, Inc.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR XR500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...