littlesky.pl Cross Site Scripting vulnerability OBB-2968695

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chepizzact.com Cross Site Scripting vulnerability OBB-2967435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wegstatus.nl Cross Site Scripting vulnerability OBB-2966287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webprice.co.il Cross Site Scripting vulnerability OBB-2966269

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

centroodontologicoreinavictoria.com Cross Site Scripting vulnerability OBB-2965668

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Bus Pass Management System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Bus Pass Management System 1.0 - 'searchdata' Cross-Site Scripting XSS Exploit Author: Ali Alipour Vendor Homepage: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql Software Link:...

conuno.de Cross Site Scripting vulnerability OBB-2960955

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-40044

CVE-2022-40044 affects Centreon v20.10.18, where the esc_name parameter in the Configuration/Notifications/Escalations component is vulnerable to Cross-Site Scripting (XSS) due to insufficient input sanitization. The vulnerability allows an attacker to inject and execute arbitrary web scripts or ...

Mozilla: Data-race when parsing non-UTF-8 URLs in threads

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that concurrent use of the URL parser with non-UTF-8 data was not thread-safe, leading to a use-after-free problem and causing a potentially exploitable crash...

Cross-site Scripting (XSS)

com.liferay.portal.search.web is vulnerable to cross-site scripting.The vulnerability exists in view.jsp due to incorrectly neutralizes user-controllable input, which allows an attacker to execute arbitrary web scripts or HTML via a malicious payload injected into the Custom Parameter Name text...

d-friese.de Cross Site Scripting vulnerability OBB-2948117

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bigboysystems.com Cross Site Scripting vulnerability OBB-2943335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Feehi CMS 2.1.1 Remote Code Execution

Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution RCE Authenticated Date: 22-08-2022 Exploit Author: yuyudhn Vendor Homepage: https://feehi.com/ Software Link: https://github.com/liufee/cms Version: 2.1.1 REQUIRED Tested on: Linux, Docker CVE : CVE-2022-34140 Proof of Concept: 1. Login using...

CVE-2022-40088

The CVE-2022-40088 entry affects Simple College Website v1.0, with a reflected XSS vulnerability in the page parameter of /college_website/index.php?page=. The root cause is input reflected back into the page, enabling arbitrary web-script/HTML execution when a crafted payload is submitted. The N...

Multix 2.4 Cross Site Request Forgery

Exploit Title: Multix - Multipurpose Website CMS with Codeigniter Cross Site Request Forgery Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/multix-multipurpose-website-cms-with-codeigniter/23537596 Version: Version 2.4 Tested on Ubuntu...

CVE-2022-28982

Summary: CVE-2022-28982 is an XSS vulnerability in Liferay Portal 7.3.3–7.4.2 and Liferay DXP 7.3 before Service Pack 3. The flaw allows an attacker to inject a crafted payload into a tag name, enabling arbitrary web scripts/HTML execution on the client side. Affected products/components: Liferay...

CVE-2022-40027

CVE-2022-40027 affects SourceCodester Simple Task Managing System v1.0. The vulnerability is a cross-site scripting (XSS) in the newTask.php component, exploitable via the shortName parameter to cause arbitrary web scripts/HTML execution. Reported impact per sources is low on confidentiality/inte...

CVE-2022-23693

CVE-2022-23693 affects Aruba ClearPass Policy Manager. The web-based management interface contains SQL injection vulnerabilities that authenticated remote attackers could exploit against 6.10.x (6.10.6 and below) and 6.9.x (6.9.11 and below). Multiple sources (NVD/Red Hat/PRION/CNNVD/NCSc) confir...

CVE-2022-38550

Jeesns v2.0.0 contains a stored XSS in the /weibo/list component. The vulnerability allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Affected software: Jeesns 2.0.0 (Web UI component /weibo/list). Root cause: stored XSS in the mentioned component. Impact: potenti...

OpenCart 3.x Newsletter Custom Popup 4.0 SQL Injection

Exploit Title: OpenCart v3.x So Newsletter Custom Popup Module - Blind SQL Injection Date: 18/09/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link:...