eco-agenda.yildiz.edu.tr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-994479 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting eco-agenda.yildiz.edu.tr...

CVE-2019-17537

Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring...

CVE-2019-17537

The CVE-2019-17537 entry concerns Jiangnan Online Judge (jnoj) v0.8.0, which is affected by a Directory Traversal vulnerability in the web endpoint web/polygon/problem/deletefile?id=1&name=../ that enables arbitrary file deletion. Root cause stated across sources is improper/unsanitized path hand...

arundel.mdwg.cap.gov Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-991101 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2019-17490

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge aka jnoj 0.8.0 allows arbitrary file upload, as demonstrated by PHP code with a .php filename but the image/png content type to the web/polygon/problem/tests URI...

CVE-2019-17489

Jiangnan Online Judge (jnoj) 0.8.0 is affected by a Cross-Site Scripting (XSS) flaw that can be triggered via the Problem[title] field on the endpoints web/polygon/problem/create, web/polygon/problem/update, or web/admin/problem/create. The root cause is unvalidated client-side data in these web ...

Microsoft Dynamics 365 CVE-2019-1375 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

HCL AppScan Source Code Issue Vulnerability

HCL AppScan Source is a suite of dynamic analysis and testing tools from HCL India, which is mainly used for web security testing. A code issue vulnerability exists in HCL AppScan Source versions prior to 9.03.13. The vulnerability stems from an improperly designed or implemented code development...

Bludit Brute Force Protection Mechanism Bypass Vulnerability

Bludit is a simple, fast and secure flat file CMS. A brute force protection mechanism bypass vulnerability exists in bl-kernel/security.class.php in Bludit 3.9.2, which can be exploited by an attacker to bypass the brute force protection mechanism via a variety of forged X-Forwarded-For or...

Cisco Prime Infrastructure CVE-2019-12713 Cross Site Scripting Vulnerability

Description Cisco Prime Infrastructure is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Drupal Ubercart Module SA-CONTRIB-2019-070 Cross Site Scripting Vulnerability

Description The Ubercart module for Drupal is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authenticatio...

Eclipse Mojarra CVE-2019-17091 Cross Site Scripting Vulnerability

Description Eclipse Mojarra is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may all...

NetApp OnCommand Workflow Automation Information Disclosure Vulnerability

NetApp OnCommand Workflow Automation is a suite of storage process management software from American NetApp. The software provides storage configuration, storage cloning and other functions for the database or file system. An information disclosure vulnerability exists in NetApp OnCommand Workflo...

CVE-2019-16686

Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin...

ACTi ACM-5611 Video Camera Remote Command Execution

!/usr/bin/perl ACTi ACM-5611 Video Camera Remote Command Execution Exploit Copyright 2019 c Todor Donev Firmware Version = A1D-220-V3.08.08-AC Production ID = ACM5611-08G-X-00485 Factory Default Type = NTSC, Composite, Two Ways Audio 0x71 Company Name = ACTi Corporation WEB Site = www.acti.com...

CVE-2019-16706

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cmsuseradd.php...

CISA Releases Four New Insights Products

The Cybersecurity and Infrastructure Security Agency CISA has released four new CISA Insights products informed by U.S. intelligence and real-world events. Each of the following products provides a description of the threat, lessons learned, recommendations, and additional relevant resources:...

no.thegraduatejob.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-976014 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting no.thegraduatejob.com websit...

comboimoveis.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-975340 Security Researcher pacenoge Helped patch 399 vulnerabilities Received 3 Coordinated Disclosure badges Received 9 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting comboimoveis.com.br website...

razorblade.collector.free.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-974772 Security Researcher KhanJanny Helped patch 3055 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting...