CVE-2018-1558

CVE-2018-1558 describes cross-site scripting in IBM Rational CLM and related Jazz-based products. Affected products include CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, and RSA DM across 5.x and 6.x (up to 6.0.6). The vulnerability arises from a Web UI XSS flaw that can lead to credential disclosure w...

dainiksambad.net XSS vulnerability

Open Bug Bounty ID: OBB-681802 Description| Value ---|--- Affected Website:| dainiksambad.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Foxit PDF Reader JavaScript Field object signatureInfo remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

Airties AIR5443v2 1.0.0.18 Cross Site Scripting

Exploit Title: Airties AIR5443v2 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Tested on: MacOS High Sierra / Linux Mint / Windows 10 CVE : CVE-2018-17590 A...

ManageEngine AssetExplorer 6.2.0 Cross Site Scripting

Exploit Title: ManageEngine AssetExplorer 6.2.0 - Stored XSS Date: 2018-09-26 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/asset-explorer/ Software : ZOHO Corp ManageEngine AssetExplorer 6.2.0 Product Version:...

Airties AIR5650 1.0.0.18 Cross Site Scripting

Exploit Title: Airties AIR5650 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Tested on: MacOS High Sierra / Debian / Windows 10 CVE : CVE-2018-17589 A cross si...

CVE-2018-1704

IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1, and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are affected by CVE-2018-1704, an open redirect vulnerability that enables a remote attacker to conduct phishing by tricking a user into visiting a crafted site and spoofing the URL to redirect to a malici...

obchodnirejstrik.cz XSS vulnerability

Open Bug Bounty ID: OBB-680697 Description| Value ---|--- Affected Website:| obchodnirejstrik.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7355

The CVE-2018-7355 entry concerns a cross-site scripting vulnerability in ZTE MF65 and MF65M1 devices (firmware up to V1.0.0B05 and V1.0.0B02, respectively). The root cause is improper neutralization/filtering of input during web page generation, specifically in the goform_get_cmd_process page whe...

opencircuit.shop XSS vulnerability

Open Bug Bounty ID: OBB-680175 Description| Value ---|--- Affected Website:| opencircuit.shop Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

transparencia.ubatuba.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-679766 Description| Value ---|--- Affected Website:| transparencia.ubatuba.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tourdecols.auwerda.nl XSS vulnerability

Open Bug Bounty ID: OBB-679537 Description| Value ---|--- Affected Website:| tourdecols.auwerda.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cloudflare Embraces Google Roughtime, Giving Internet Security a Boost

Syncing clocks online is vital to web security...

klasyczny.krn.pl XSS vulnerability

Open Bug Bounty ID: OBB-678777 Description| Value ---|--- Affected Website:| klasyczny.krn.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kovosteel.cz XSS vulnerability

Open Bug Bounty ID: OBB-678653 Description| Value ---|--- Affected Website:| kovosteel.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chaturbate: Blind SSRF at https://chaturbate.com/notifications/update_push/

In the application at https://chaturbate.com/notifications/updatepush/ there is a functionality to subscribe any cam model which will trigger the provided request. Using this Request an attacker can execute SSRF attack and also steal sensitive Token / Keys of the internal web server Steps to...

trotsvanhetnoorden.nl XSS vulnerability

Open Bug Bounty ID: OBB-677951 Description| Value ---|--- Affected Website:| trotsvanhetnoorden.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-9045

Summary: CVE-2016-9045 affects ProcessMaker Enterprise Core 3.0.1.7-community. The vulnerability is a remote code execution due to unsafe deserialization; a crafted web request can trigger PHP code execution by exploiting how input is deserialized. The Proof-of-Concept involves a request paramete...

pier51keystone.com XSS vulnerability

Open Bug Bounty ID: OBB-677419 Description| Value ---|--- Affected Website:| pier51keystone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

naerasmusplus.cz XSS vulnerability

Open Bug Bounty ID: OBB-677335 Description| Value ---|--- Affected Website:| naerasmusplus.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...