17430 matches found
XenForo 2 CSS Loader Denial Of Service
Exploit Title: XenForo CSS Loader DoS Google Dork: intext:"Forum software by XenForoaC/" inurl:css.php ext:php Date: 22-03-18 Exploit Author: LockedByte Vendor Homepage: https://xenforo.com/ Software Link: https://xenforo.com/help/installation/ Version: XenForo 2 Tested on: Linux...
TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery
/ Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF Date: 21-3-2018 Exploit Author: Mans van Someren Vendor Homepage: https://www.tp-link.com/ Software Link: https://static.tp-link.com/resources/software/TL-WR720NV1130719.zip Version: All versions because its a 0day Testen on: Google Chro...
job4italy.com XSS vulnerability
Open Bug Bounty ID: OBB-585292 Description| Value ---|--- Affected Website:| job4italy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
vgvunkel.de XSS vulnerability
Open Bug Bounty ID: OBB-585138 Description| Value ---|--- Affected Website:| vgvunkel.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-0536
QQQ SYSTEMS (ver2.24) exposes a cross-site scripting vulnerability in quiz.cgi (CWE-79). The CGI-based quiz page creator allows an attacker to inject arbitrary web scripts via quiz.cgi, potentially affecting users who load malicious pages. Reported in multiple sources (CNVD/NVD/JVN) with impact d...
CVE-2018-0538
The CVE-2018-0538 entry concerns QQQ SYSTEMS ver2.24, a CGI-based quiz-system that contains a stored cross-site scripting vulnerability (CWE-79). Affected component is the web UI handling administrative/arbitrary input that can be crafted to execute arbitrary scripts in the victim’s browser, enab...
portent.com XSS vulnerability
Open Bug Bounty ID: OBB-584657 Description| Value ---|--- Affected Website:| portent.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
utmost.org XSS vulnerability
Open Bug Bounty ID: OBB-584603 Description| Value ---|--- Affected Website:| utmost.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-1347
NetIQ iManager admin web interface (versions prior to 3.1) is affected by a reflected cross-site scripting (XSS) vulnerability. The issue arises in the administrative web interface and reflects attacker-supplied input in the response, enabling potential script execution. The provided data cites C...
flinnt.com XSS vulnerability
Open Bug Bounty ID: OBB-583928 Description| Value ---|--- Affected Website:| flinnt.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
wnyc.org XSS vulnerability
Open Bug Bounty ID: OBB-583517 Description| Value ---|--- Affected Website:| wnyc.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-1665
CVE-2014-1665 is an XSS vulnerability in ownCloud prior to 6.0.1 where an authenticated user could inject script via the filename of an uploaded file. Affected products include ownCloud versions 6.x up to 6.0.1 (with multiple sources citing 6.0.0a and 6.0.0-era builds). Root cause is mishandling ...
dic.naver.com XSS vulnerability
Open Bug Bounty ID: OBB-583101 Description| Value ---|--- Affected Website:| dic.naver.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-8815
CVE-2018-8815 concerns Alkacon OpenCMS 10.5.3 where the gallery feature is vulnerable to cross-site scripting (XSS). A remote attacker can inject arbitrary web script or HTML by supplying a malicious SVG image, due to an underlying issue in the gallery function. The available sources confirm the ...
adiconsum.it XSS vulnerability
Open Bug Bounty ID: OBB-581683 Description| Value ---|--- Affected Website:| adiconsum.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-1199
CVE-2018-1199 affects Spring Security (4.1.x before 4.1.5, 4.2.x before 4.2.4, 5.0.x before 5.0.1) and Spring Framework (4.3.x before 4.3.14, 5.0.x before 5.0.3). The issue is that URL path parameters are not consistently handled when evaluating security constraints, allowing an attacker to bypas...
simonandschuster.com XSS vulnerability
Open Bug Bounty ID: OBB-581163 Description| Value ---|--- Affected Website:| simonandschuster.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Spring Batch Admin vulnerable to Cross Site Request Forgery
Spring Batch Admin does not contain Cross Site Request Forgery CSRF protection, which may allow an attacker to craft a malicious site that executes requests to Spring Batch Admin...
Cisco Web Security Appliance FTP Authentication Bypass Vulnerability
According to its self-reported version, the remote Cisco Web Security Appliance WSA device is affected by a FTP authentication bypass vulnerability, due to inccorect validation of credentials. A remote attacker could potentially log into the FTP server without a valid password. TRUSTED...