CVE-2018-7355

The CVE-2018-7355 entry concerns a cross-site scripting vulnerability in ZTE MF65 and MF65M1 devices (firmware up to V1.0.0B05 and V1.0.0B02, respectively). The root cause is improper neutralization/filtering of input during web page generation, specifically in the goform_get_cmd_process page whe...

opencircuit.shop XSS vulnerability

Open Bug Bounty ID: OBB-680175 Description| Value ---|--- Affected Website:| opencircuit.shop Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

transparencia.ubatuba.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-679766 Description| Value ---|--- Affected Website:| transparencia.ubatuba.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tourdecols.auwerda.nl XSS vulnerability

Open Bug Bounty ID: OBB-679537 Description| Value ---|--- Affected Website:| tourdecols.auwerda.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cloudflare Embraces Google Roughtime, Giving Internet Security a Boost

Syncing clocks online is vital to web security...

klasyczny.krn.pl XSS vulnerability

Open Bug Bounty ID: OBB-678777 Description| Value ---|--- Affected Website:| klasyczny.krn.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kovosteel.cz XSS vulnerability

Open Bug Bounty ID: OBB-678653 Description| Value ---|--- Affected Website:| kovosteel.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chaturbate: Blind SSRF at https://chaturbate.com/notifications/update_push/

In the application at https://chaturbate.com/notifications/updatepush/ there is a functionality to subscribe any cam model which will trigger the provided request. Using this Request an attacker can execute SSRF attack and also steal sensitive Token / Keys of the internal web server Steps to...

trotsvanhetnoorden.nl XSS vulnerability

Open Bug Bounty ID: OBB-677951 Description| Value ---|--- Affected Website:| trotsvanhetnoorden.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-9045

Summary: CVE-2016-9045 affects ProcessMaker Enterprise Core 3.0.1.7-community. The vulnerability is a remote code execution due to unsafe deserialization; a crafted web request can trigger PHP code execution by exploiting how input is deserialized. The Proof-of-Concept involves a request paramete...

pier51keystone.com XSS vulnerability

Open Bug Bounty ID: OBB-677419 Description| Value ---|--- Affected Website:| pier51keystone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

naerasmusplus.cz XSS vulnerability

Open Bug Bounty ID: OBB-677335 Description| Value ---|--- Affected Website:| naerasmusplus.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wohnen-in-querfurt.de XSS vulnerability

Open Bug Bounty ID: OBB-677056 Description| Value ---|--- Affected Website:| wohnen-in-querfurt.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-17075

CVE-2018-17075 affects Go’s html package (x/net/html) prior to 2018-07-13. The vulnerability arises from mishandling the htmlParse insertion mode in frameset contexts, causing a panic: runtime error when parsing crafted HTML like , , or . The issue is linked to HTMLTreeBuilder.cpp in WebKit. The ...

Apache Portals Pluto 3.0.0 - Remote Code Execution Exploit

Exploit for windows platform in category web applications Exploit Title: Apache Portals Pluto 3.0.0 - Remote Code Execution Exploit Author: Che-Chun Kuo Vendor Homepage: https://portals.apache.org/pluto/ Software Link: http://archive.apache.org/dist/portals/pluto/ Version: 3.0.0 Tested on: Window...

CVE-2018-17069

An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay...

josbank.com XSS vulnerability

Open Bug Bounty ID: OBB-676925 Description| Value ---|--- Affected Website:| josbank.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

emlak.mitula.com.tr XSS vulnerability

Open Bug Bounty ID: OBB-676835 Description| Value ---|--- Affected Website:| emlak.mitula.com.tr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

television.linternaute.com XSS vulnerability

Open Bug Bounty ID: OBB-676796 Description| Value ---|--- Affected Website:| television.linternaute.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seo.new-web.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-676451 Description| Value ---|--- Affected Website:| seo.new-web.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...