15181 matches found
Cybozu Garoon 3.5.0 - 4.6.2 Notification List SQLi Vulnerability
Cybozu Garoon is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...
F5 BIG-IP ASM Design Vulnerabilities
F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. An attacker cou...
Kirby CMS 2.5.12 - Cross-Site Request Forgery (Delete Page)
Exploit Title: Kirby CMS 2.5.12 - Cross-Site Request Forgery Delete Page Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: 2.5.12 CVE: NA Category: Web Application 1. Description The application allows malicious HTTP requests to be sent in order to trick a user into adding/ deleting web page...
thecookskitchen.com XSS vulnerability
Open Bug Bounty ID: OBB-653808 Description| Value ---|--- Affected Website:| thecookskitchen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fuyusfovitsofallseason.farmvisit.com XSS vulnerability
Open Bug Bounty ID: OBB-653734 Description| Value ---|--- Affected Website:| fuyusfovitsofallseason.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...
coalwellsredshack.farmvisit.com XSS vulnerability
Open Bug Bounty ID: OBB-653728 Description| Value ---|--- Affected Website:| coalwellsredshack.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross site scripting
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the...
CVE-2018-11059
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the...
CVE-2018-11059
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the...
CVE-2018-11059
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the...
CVE-2018-11059
RSA Archer, versions prior to 6.4.0.1, contains a stored cross-site scripting vulnerability. A remote authenticated Archer user could store malicious HTML/JavaScript in a trusted application data store, causing execution in the browser context of the vulnerable web application when users access t...
Shopclues.com Cross Site Request Forgery
Exploit Title: Cross-Site Request Forgery CSRF at SHOPCLUES Date: 17.07.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.shopclues.com/ Software Type : Website Software Version : N/A Vulenrability : Cross-Site Request Forgery CSRF Risk : Medium Description : What is Cross-Site...
comune.badia.bz.it XSS vulnerability
Open Bug Bounty ID: OBB-653191 Description| Value ---|--- Affected Website:| comune.badia.bz.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-8031
The Apache TomEE console tomee-webapp has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This...
Design/Logic Flaw
The Apache TomEE console tomee-webapp has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This...
CVE-2018-8031
CVE-2018-8031 describes a Cross-site Scripting (XSS) vulnerability in the Apache TomEE console (tomee-webapp). The issue could allow arbitrary JavaScript execution when a user visits a malicious URL. TomEE bundles without this application or after setup, the UI can be removed to mitigate exposure...
CVE-2018-8031
The Apache TomEE console tomee-webapp has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This...
Kirby CMS 2.5.12 - Cross-Site Scripting
Kirby CMS 2.5.12 - Cross-Site Scripting Exploit Title: Kirby CMS 2.5.12 - Cross-Site Scripting Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: 2.5.12 CVE : NA Category: Web Application Description The application allows user injected payload which can lead to Stored Cross Site...
Kirby CMS 2.5.12 - Cross-Site Scripting
Exploit Title: Kirby CMS 2.5.12 - Cross-Site Scripting Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: 2.5.12 CVE : NA Category: Web Application Description The application allows user injected payload which can lead to Stored Cross Site Scripting. Proof of Concept 1. Visit the application...
