Airties AIR5650 1.0.0.18 Cross Site Scripting

Exploit Title: Airties AIR5650 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Tested on: MacOS High Sierra / Debian / Windows 10 CVE : CVE-2018-17589 A cross si...

CVE-2018-1704

IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1, and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are affected by CVE-2018-1704, an open redirect vulnerability that enables a remote attacker to conduct phishing by tricking a user into visiting a crafted site and spoofing the URL to redirect to a malici...

obchodnirejstrik.cz XSS vulnerability

Open Bug Bounty ID: OBB-680697 Description| Value ---|--- Affected Website:| obchodnirejstrik.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7355

The CVE-2018-7355 entry concerns a cross-site scripting vulnerability in ZTE MF65 and MF65M1 devices (firmware up to V1.0.0B05 and V1.0.0B02, respectively). The root cause is improper neutralization/filtering of input during web page generation, specifically in the goform_get_cmd_process page whe...

opencircuit.shop XSS vulnerability

Open Bug Bounty ID: OBB-680175 Description| Value ---|--- Affected Website:| opencircuit.shop Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

transparencia.ubatuba.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-679766 Description| Value ---|--- Affected Website:| transparencia.ubatuba.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tourdecols.auwerda.nl XSS vulnerability

Open Bug Bounty ID: OBB-679537 Description| Value ---|--- Affected Website:| tourdecols.auwerda.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cloudflare Embraces Google Roughtime, Giving Internet Security a Boost

Syncing clocks online is vital to web security...

klasyczny.krn.pl XSS vulnerability

Open Bug Bounty ID: OBB-678777 Description| Value ---|--- Affected Website:| klasyczny.krn.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kovosteel.cz XSS vulnerability

Open Bug Bounty ID: OBB-678653 Description| Value ---|--- Affected Website:| kovosteel.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chaturbate: Blind SSRF at https://chaturbate.com/notifications/update_push/

In the application at https://chaturbate.com/notifications/updatepush/ there is a functionality to subscribe any cam model which will trigger the provided request. Using this Request an attacker can execute SSRF attack and also steal sensitive Token / Keys of the internal web server Steps to...

trotsvanhetnoorden.nl XSS vulnerability

Open Bug Bounty ID: OBB-677951 Description| Value ---|--- Affected Website:| trotsvanhetnoorden.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-9045

Summary: CVE-2016-9045 affects ProcessMaker Enterprise Core 3.0.1.7-community. The vulnerability is a remote code execution due to unsafe deserialization; a crafted web request can trigger PHP code execution by exploiting how input is deserialized. The Proof-of-Concept involves a request paramete...

pier51keystone.com XSS vulnerability

Open Bug Bounty ID: OBB-677419 Description| Value ---|--- Affected Website:| pier51keystone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

naerasmusplus.cz XSS vulnerability

Open Bug Bounty ID: OBB-677335 Description| Value ---|--- Affected Website:| naerasmusplus.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wohnen-in-querfurt.de XSS vulnerability

Open Bug Bounty ID: OBB-677056 Description| Value ---|--- Affected Website:| wohnen-in-querfurt.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-17075

CVE-2018-17075 affects Go’s html package (x/net/html) prior to 2018-07-13. The vulnerability arises from mishandling the htmlParse insertion mode in frameset contexts, causing a panic: runtime error when parsing crafted HTML like , , or . The issue is linked to HTMLTreeBuilder.cpp in WebKit. The ...

Apache Portals Pluto 3.0.0 - Remote Code Execution Exploit

Exploit for windows platform in category web applications Exploit Title: Apache Portals Pluto 3.0.0 - Remote Code Execution Exploit Author: Che-Chun Kuo Vendor Homepage: https://portals.apache.org/pluto/ Software Link: http://archive.apache.org/dist/portals/pluto/ Version: 3.0.0 Tested on: Window...

CVE-2018-17069

An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay...

josbank.com XSS vulnerability

Open Bug Bounty ID: OBB-676925 Description| Value ---|--- Affected Website:| josbank.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...