willowandoakphotography.com Cross Site Scripting vulnerability OBB-3029376

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

turktaslojistik.com Cross Site Scripting vulnerability OBB-3028840

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-Excellence U-Office Force 跨站脚本漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a cross-site scripting vulnerability that stems from insufficient filtering of special characters in HTTP header fields on its UserDefault page, which could allow an...

CVE-2022-40487

CVE-2022-40487 : ProcessWire v3.0.200 is affected by multiple cross-site scripting (XSS) vulnerabilities in the Search Users and Search Pages functions, allowing an attacker to inject arbitrary web scripts or HTML through crafted payloads. This is documented across multiple sources (Red Hat, Vera...

CVE-2022-43169

Rukovoditel v3.2.1 is affected by a stored XSS in the Users Access Groups feature (/index.php?module=users_groups/users_groups). The vulnerability allows authenticated users to inject arbitrary HTML/JavaScript into the Name field after selecting “Add New Group,” which can lead to execution of scr...

TikTok: bypass two-factor authentication in Android apps and web

A vulnerability was found where a random timeout issue on a Two-Step Verification endpoint could have resulted in a potential bypass of authentication if multiple incorrect attempts were entered in quick succession. It was found that this vulnerability required access to the user's email/password...

Stored Cross-site scripting

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. Proof of Concept Visit: http:///phpmyfaq/admin/?action=meta Click button Add template meta data Inject payload in field Page type: "alert"XSS"...

Reflect Cross Site Scripting when search

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. Proof of Concept 1. Go to your web phpmyfaq and visit http:///phpmyfaq/index.php?search= 2. inject payload to param search: 1af"+onclick='alert...

CVE-2022-43185

Summary (confirmed details): Rukovoditel version 3.2.1 contains a stored XSS vulnerability in the application that can be triggered via the Name parameter in data-entry workflows. The most concrete reference points to the Global Lists feature (index.php?module=global_lists/lists) where an authent...

CVE-2022-39057

The CVE-2022-39057 issue concerns Changing Information Technology Inc.’s RAVA certificate validation system, where insufficient filtering of a special parameter in a web page input field allows a remote attacker with administrator privileges to perform arbitrary system commands and disrupt servic...

focusedbuyer.com Cross Site Scripting vulnerability OBB-3001650

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bombaybasket.co.uk Cross Site Scripting vulnerability OBB-3001107

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ewwd.org Cross Site Scripting vulnerability OBB-3001027

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

statimmo.fr Cross Site Scripting vulnerability OBB-3000981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-41472

CVE-2022-41472 affects 74cmsSE v3.12.0. The vulnerability is a Cross‑Site Scripting (XSS) in the API endpoint “/apiadmin/notice/add” where a crafted payload placed in the Title field can execute arbitrary web scripts/HTML in a user’s browser. The root cause is an input that is not properly saniti...

CVE-2022-41431

CVE-2022-41431 affects xzs v3.8.0. A cross-site scripting (XSS) vulnerability exists in the /admin/question/edit component, where an attacker can inject malicious script via the Title field. The vulnerability enables execution of arbitrary web scripts/HTML in the affected web app. Documents speci...

AZL-35041 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

capelletv.com Cross Site Scripting vulnerability OBB-2995413

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eksenlift.com Cross Site Scripting vulnerability OBB-2993115

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

denturoplus.ca Cross Site Scripting vulnerability OBB-2992991

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...