17429 matches found
CVE-2020-7810
The CVE-2020-7810 entry concerns the hslogin2.dll ActiveX Control in HandySoft Groupware. The vulnerability arises from a lack of integrity verification for policy files referenced during the update process, enabling a remote attacker to craft a web page that could trigger the ActiveX method to d...
CTF-challenges-by-me
This is an offensive tool for CTF challenges. It is a collection of exploits and challenges from various CTF events, including 0ctffinal-2017 and 0ctfquals-2018. The repository contains a variety of challenges, including web security, pwnable, and cryptography challenges. The challenges are...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...
PortSwigger Web Security: SMTP interaction theft via MITM
See http://www.postfix.org/CVE-2011-0411.html for adetailled description. Impact MitM could obtain user credentials...
All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
Exploit Title: All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery Add Admin Discovery by: LiquidWorm Discovery Date: 2020-08-05 Vendor Homepage: https://www.all-dynamics.de !-- All-Dynamics Software enlogic:show Digital Signage System 2.0.2 CSRF Add Admin Vendor: All-Dynamics...
OPENSUSE-SU-2020:1155-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.1.0 ESR Fixed: Various stability, functionality, and security fixes bsc1174538 CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker CVE-2020-6514: WebRTC data channel...
macaron: open redirect in the static handler
A flaw was found in macaron. Path URLs aren't cleaned before being redirected creating an open redirect in the static handler...
Exploit for SQL Injection in Djangoproject Django
DOBBYISFREE! - 출제된 CTF: 2020 Christmas CTFhttps://dreamh...
spaheviz.iaom.hu Cross Site Scripting vulnerability OBB-1247674
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pradopolis.sp.gov.br Cross Site Scripting vulnerability OBB-1247347
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
diveko.at Cross Site Scripting vulnerability OBB-1246519
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
edwardsaquifer.granicus.com Cross Site Scripting vulnerability OBB-1245330
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
components.alldatasheetcn.com Cross Site Scripting vulnerability OBB-1245280
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
4000750567.com Cross Site Scripting vulnerability OBB-1243965
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
webapps.astate.edu Cross Site Scripting vulnerability OBB-1243630
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
zoostar.spb.ru Cross Site Scripting vulnerability OBB-1242400
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dailysteals.com Cross Site Scripting vulnerability OBB-1240670
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Trend Micro InterScan Web Security Virtual Appliance Detection
Binary data trendmicroiwsvadetect.nbin...
Xi'an Bailian Network Technology Co., Ltd. Bailian network mall system has SQL injection vulnerability
BaiLian mall system is a set of computer version of the mall + cell phone version of the website + micro-mall enterprise weibo public number secondary development + BaiLian bearing network professional promotion and publicity in one of the new marketing solutions. Xi'an Bailian Network Technology...
roongthongtour.com Cross Site Scripting vulnerability OBB-1237333
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...