drmartens.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-686714 Description| Value ---|--- Affected Website:| drmartens.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atgreijdanus.nl XSS vulnerability

Open Bug Bounty ID: OBB-686504 Description| Value ---|--- Affected Website:| atgreijdanus.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

S-CMS Hospital Website Builder System has SQL Injection Vulnerability in Frontend

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the frontend of S-CMS Hospital Building System. An attacker can exploit the vulnerability to obtain sensitive information from...

CVE-2018-1534

IBM Rational Publishing Engine 6.0.5 and 6.0.6 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that can let an attacker inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is tied to the Rational Publishing Engine...

HaPe PKH 1.1 - 'id' SQL Injection

Exploit Title: HaPe PKH 1.1 - 'id' SQL Injection Dork: N/A Date: 2018-10-12 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.sitejo.id Software Link: https://sourceforge.net/projects/hape-pkh/files/latest/download Version: 1.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC...

booksbg.org XSS vulnerability

Open Bug Bounty ID: OBB-685117 Description| Value ---|--- Affected Website:| booksbg.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

CVE-2018-0059

CVE-2018-0059 concerns a stored cross-site scripting vulnerability in Juniper ScreenOS (GUI). The issue is triggered by an authenticated remote user who can inject Web/script content, potentially stealing data and credentials from a web administration session and tricking another admin into unint...

Automate Firewall Protection on Your Website

by Volker Tegtmeyer and Hans Cathcart Have you ever felt like you did a great job protecting your mission-critical web applications, only to realize so many more web properties require your attention? Web properties are not all equal, and overloaded security teams can only focus on the most...

bruce-clarke.com XSS vulnerability

Open Bug Bounty ID: OBB-684316 Description| Value ---|--- Affected Website:| bruce-clarke.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

web.jackpot.de XSS vulnerability

Open Bug Bounty ID: OBB-683430 Description| Value ---|--- Affected Website:| web.jackpot.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chamilo LMS 1.11.8 - firstname Cross-Site Scripting

Chamilo LMS 1.11.8 - firstname Cross-Site Scripting Exploit Title: Chamilo LMS 1.11.8 - 'firstname' Cross-Site Scripting Author: Cakes Discovery Date: 2018-10-06 Vendor Homepage: https://chamilo.org Software Link:...

klockor4you.nu XSS vulnerability

Open Bug Bounty ID: OBB-682779 Description| Value ---|--- Affected Website:| klockor4you.nu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

malt.fr XSS vulnerability

Open Bug Bounty ID: OBB-682661 Description| Value ---|--- Affected Website:| malt.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shop.orthomattress.com XSS vulnerability

Open Bug Bounty ID: OBB-682280 Description| Value ---|--- Affected Website:| shop.orthomattress.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

encyclopedie.bseditions.fr XSS vulnerability

Open Bug Bounty ID: OBB-682212 Description| Value ---|--- Affected Website:| encyclopedie.bseditions.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1558

CVE-2018-1558 describes cross-site scripting in IBM Rational CLM and related Jazz-based products. Affected products include CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, and RSA DM across 5.x and 6.x (up to 6.0.6). The vulnerability arises from a Web UI XSS flaw that can lead to credential disclosure w...

dainiksambad.net XSS vulnerability

Open Bug Bounty ID: OBB-681802 Description| Value ---|--- Affected Website:| dainiksambad.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Foxit PDF Reader JavaScript Field object signatureInfo remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

Airties AIR5443v2 1.0.0.18 Cross Site Scripting

Exploit Title: Airties AIR5443v2 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Tested on: MacOS High Sierra / Linux Mint / Windows 10 CVE : CVE-2018-17590 A...

ManageEngine AssetExplorer 6.2.0 Cross Site Scripting

Exploit Title: ManageEngine AssetExplorer 6.2.0 - Stored XSS Date: 2018-09-26 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/asset-explorer/ Software : ZOHO Corp ManageEngine AssetExplorer 6.2.0 Product Version:...