CVE-2011-4661

CVE-2011-4661 affects Cisco IOS before 15.2(1)T, caused by a memory leak in the HTTP PROXY Server (CSCtu52820) when ISR Web Security with ScanSafe and NTLM authentication is configured. Documented impact includes partial availability loss with attack surface over the network. No explicit exploit ...

CVE-2011-4661

A memory leak vulnerability exists in Cisco IOS before 15.21T due to a memory leak in the HTTP PROXY Server process aka CSCtu52820, when configured with Cisco ISR Web Security with Cisco ScanSafe and User Authenticaiton NTLM configured...

CVE-2015-5617

CVE-2015-5617 describes a SQL injection in Enorth Webpublisher CMS via /pub/m_pending_news/delete_pending_news.jsp. The parameter cbNewsId is read and used in a SQL DELETE built by PendingNewsBean.deletePendingNews, concatenating IDs into an IN clause without sufficient validation. A remote attac...

Forcepoint Web Security Cross-Site Scripting Vulnerability

Forcepoint Web Security provides the defenses you need to protect against Advanced Points of Attack APTs in a proxy architecture, with instant threat analysis and forensic reporting at the gateway. A cross-site scripting vulnerability exists in Forcepoint Web Security. The vulnerability stems fro...

CVE-2012-6720

CVE-2012-6720 concerns a Cross-Site Scripting (XSS) vulnerability in SocialEngine prior to version 4.2.4. The issue allows remote attackers to inject arbitrary web script or HTML through specific parameters: (1) title to music/create, (2) location to events/create, and (3) search to widget/index/...

Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting

Exploit Title: Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting Exploit Author: Prasenjit Kanti Paul Vendor Homepage: https://www.forcepoint.com/ Software Link: https://www.forcepoint.com/product/cloud-security/web-security Version: Forcepoint Web Security 8.5 Tested on: Windows 7,10...

unceasingworship.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1085681 Security Researcher Broly157 Helped patch 1605 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting unceasingworship.com...

hibernate-validator: safeHTML validator allows XSS

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10172)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

mycomp.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1083811 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting mycomp.ch website and it...

The vulnerability of the API Framework web server component of Cisco Web Security Appliance (WSA) and the Cisco Content Security Management Appliance (SMA) security management device allows a perpetrator to inject arbitrary HTTP headers into responses.

The vulnerability of the API Framework web server component of Cisco Web Security Appliance WSA and the Cisco Content Security Management Appliance SMA security management device is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious...

jewe.be Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1082461 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting jewe.be website and its user...

CVE-2014-2843

CVE-2014-2843 is a reflected XSS vulnerability in infoware MapSuite MapAPI. Affected versions are MapAPI before 1.0.36 (and 1.1.x before 1.1.49). Fixed releases are MapAPI 1.0.36 and 1.1.49. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ...

madcowmodels.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1080010 Security Researcher kun-fly Helped patch 790 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting madcowmodels.com website an...

its.technarts.com Cross Site Scripting vulnerability

Security Researcher rahulvi93723664 Helped patch 20 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting its.technarts.com website and its users. Following coordinated and responsible...

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) Information Disclosure Vulnerability (1122250)

According to its self-reported version, the instance of Trend Micro InterScan Web Security Virtual Appliance is affected by an information disclosure vulnerability in its web console component. An authenticated, remote attacker can exploit this, to disclose credentials of the web console...

pollbob.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1078088 Security Researcher Hackerclaus Helped patch 69 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting pollbob.com website and i...

puls000.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting puls000.ru website and its users. Following coordinated an...

nixj.net Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting nixj.net website and its users. Following coordinated and...

railtex.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1076795 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...