CVE-2020-3164

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance ESA, Cisco Web Security Appliance WSA, and Cisco Content Security Management Appliance SMA could allow an unauthenticated remote attacker to cause high CPU usage on an affected device,...

CVE-2020-3164

Summary: CVE-2020-3164 is a GUI Denial of Service vulnerability in Cisco AsyncOS web interfaces for the Cisco Email Security Appliance (ESA), Web Security Appliance (WSA), and Content Security Management Appliance (SMA). It stems from improper validation of specific HTTP request headers, allowing...

nrdcactionfund.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1109573 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting nrdcactionfund.org website and its users. Following...

CVE-2018-14384

CVE-2018-14384 affects the Website Manager module of SEO Panel ≤3.13.0, with a stored XSS vulnerability exploitable by remote authenticated attackers via the websites.php name parameter. The issue allows injection of arbitrary script/HTML and is documented with CVSS v2 base score 3.5 (LOW) and CV...

CVE-2019-20486

The CVE-2019-20486 entry affects NETGEAR WNR1000V4 devices (firmware 1.1.0.54). The web management console pages setup.cgi and adv_index.htm are vulnerable to stored XSS, demonstrated via configuring the UI language. The root cause is a stored cross-site scripting flaw in the UI language configur...

Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Bypass Vulnerability

Website Security Dog is a server tool that integrates website content security protection, website resource protection and website traffic protection functions. Functions covered by the net horse / Trojan scanning, anti-SQL injection, anti-stolen links, anti-CC attacks, real-time website traffic...

smartster.se Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1105512 Security Researcher error404 Helped patch 526 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting smartster.se website and i...

Webshell Bypass Vulnerability in Web Security Dog (Apache Edition) V4.0

Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...

U.S. Dept Of Defense: Sensitive Information Leaking Through DARPA Website. [█████████]

Summary: While performing recon work on websites owned by DoD i came up with DARPA website which is leaking sensitive information. Description: The above website is leaking information such as- first name and last name, email address, phone number, house address and organization name of attendees...

Web Security Dog apacheV4.0 Has Denial of Service Vulnerability

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog apacheV4.0 has a denial of service vulnerability due to a problem with the length judgment function in th...

nodejs: HTTP header values do not have trailing optional whitespace trimmed

A flaw was found in Node.js where the HTTPs header values were not stripped of trailing whitespace. An attacker can use this flaw to send an HTTPs request which is validated by an upstream proxy server, but not by the Node.js HTTPs server...

SUSE-SU-2020:0468-1 Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.26.4 fixes the following issues: Security issues fixed: - CVE-2019-8835: Fixed multiple memory corruption issues bsc1161719. - CVE-2019-8844: Fixed multiple memory corruption issues bsc1161719. - CVE-2019-8846: Fixed a use-after-free issue bsc1161719. -...

Real Web Pentesting Tutorial Step by Step - [Persian]

1...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link:...

CVE-2020-9352

An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the transaction parameter. NOTE: the documentation states "These tools are, by...

sn251.infusionsoft.app Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1100180 Security Researcher tbm Helped patch 2172 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting sn251.infusionsoft.app website...

comatec.eu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098423 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting comatec.eu website and its users. Following coordinated and...

councilscienceeditors.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098402 Security Researcher Hchabik Helped patch 2357 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting councilscienceeditors.org...

fernandaporto.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097931 Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting fernandaporto.com.br website...

rueducinema.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097797 Security Researcher g0bl1nsec Helped patch 3741 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting rueducinema.com website a...