Oracle Java SE/Java SE Embedded CVE-2020-2659 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Networking' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231; Java SE...

nasu.com.ua Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting nasu.com.ua website and its users. Following coordinated a...

CVE-2019-18894

Affected software: Avast Premium Security 19.8.2393. Issue: a flaw in the local web server running by Avast Antivirus on port 27275 that processes a command enables arbitrary OS command execution with the privileges of the currently logged-in user. Impact: could allow an attacker (e.g., via a com...

mcdomain.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1066176 Security Researcher foulenzer Helped patch 132 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting mcdomain.de website and it...

CVE-2019-17016

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

Tishna - Complete Automated Pentest Framework For Servers, Application Layer To Web Security

Complete Automated pentest framework for Servers, Application Layer to Web Security Interface Software have 62 Options with full automation and can be use for web security swiss knife Tishna Tishna is Web Server Security Penetration Software for Ultimate Security Analaysis Kali, Parrot OS, Black...

CVE-2019-9537

CVE-2019-9537 concerns Telos Automated Message Handling System (AMHS). The vulnerability is an improper neutralization of input in uploaditem.asp, enabling a remote attacker to inject arbitrary script into an AMHS session (cross-site scripting). Affected versions are AMHS before 4.1.5.5. Several ...

CVE-2013-1642

QuiXplorer (before 2.5.5) is affected by multiple XSS vulnerabilities. The issue enables remote attackers to inject arbitrary web script or HTML via parameters (dir, item, order, searchitem, selitems[], srt) to index.php or via QUERY_STRING. Impact includes possible client-side script execution; ...

CVE-2013-7062

CVE-2013-7062 concerns multiple cross-site scripting (XSS) vulnerabilities in Zope used by Plone 3.3.x–3.3.6, 4.0.x–4.0.9, 4.1.x–4.1.6, 4.2.x–4.2.7, and 4.3–4.3.2. The issue arises from input that is not properly filtered in two components: (1) browser_id_manager and (2) OFS.Image, enabling remot...

historisches-festmahl.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1057250 Security Researcher error404 Helped patch 534 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting historisches-festmahl.de...

CVE-2019-19734

accountmovefileinfolder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection...

Heatmiser Netmonitor 3.03 - Hardcoded Credentials

Heatmiser Netmonitor 3.03 - Hardcoded Credentials Exploit Title: Heatmiser Netmonitor 3.03 - Hardcoded Credentials Date: 2019-12-22 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.heatmiser.com/en/ Hardware Link: https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf...

nvlinens.com Cross Site Scripting vulnerability

Security Researcher error404 Helped patch 522 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting nvlinens.com website and its users. Following coordinated...

umweltdigital.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1052790 Security Researcher howardpotts Helped patch 172 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting umweltdigital.de website and its users. Following...

AVE DOMINAplus 1.10.x Cross Site Request Forgery / Cross Site Scripting

AVE DOMINAplus =1.10.x CSRF/XSS Vulnerabilities Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 - 1.10.3...

xzagorov.webzdarma.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1051994 Security Researcher Fadavvi Helped patch 80 vulnerabilities Received 4 Coordinated Disclosure badges Received 1 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting xzagorov.webzdarma.cz website...

CVE-2019-6018

NetCommons3.x (NetCommons 3.2.2 and earlier) is affected by a cross-site scripting (XSS) vulnerability (CWE-79). The issue arises from insufficient validation of client data in the web application, allowing an attacker to inject arbitrary script/HTML into users’ browsers. Affected versions includ...

CVE-2019-6011

CVE-2019-6011 is a confirmed cross-site scripting vulnerability in the WordPress plugin wpDataTables Lite, affecting version 2.0.11 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially impacting users who load affected pages. T...

25400021084.amanbo.co.ke Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1051715 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

rabakehair.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048272 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...