DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting

Exploit Title: DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting Date: 2018-06-25 Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-HR3400-300Mbps-Wireless-Broadband/dp/B00IL8DR6W Category: Hardware Exploit Author: Adipta Basu Tested on: Mac OS High...

CVE-2018-12536

CVE-2018-12536 affects Eclipse Jetty Server (9.x) when webapps use the DefaultServlet/Default Error handling. A specially crafted bad query targeting non-matching URLs can trigger java.nio.file.InvalidPathException during static file serving, and if the error handler reveals the exception message...

Threat Outbreak Alert RuleID33057: Email Messages Distributing Malicious Software on June 27, 2018

Medium Alert ID: 58303 First Published: 2018 June 27 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33057 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32964: Email Messages Distributing Malicious Software on June 27, 2018

Medium Alert ID: 58302 First Published: 2018 June 27 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32964 may contain the following files: Name | Siz...

boulevereinibbenb XSS vulnerability

Open Bug Bounty ID: OBB-637489 Description| Value ---|--- Affected Website:| boulevereinibbenb Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

Threat Outbreak Alert RuleID33053: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58299 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33053 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33015: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58297 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33015 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32978: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58296 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32978 may contain the following files: Name | Siz...

CVE-2018-0605

Pixelpost v1.7.3 and earlier is affected by a Cross‑site Scripting (CWE-79) vulnerability (CVE-2018-0605). The issue allows an unauthenticated remote attacker to inject arbitrary web script or HTML that could run in the context of an affected user’s browser. The connected sources consistently ide...

hindujahospital.com XSS vulnerability

Open Bug Bounty ID: OBB-636827 Description| Value ---|--- Affected Website:| hindujahospital.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

geba-online.de XSS vulnerability

Open Bug Bounty ID: OBB-636741 Description| Value ---|--- Affected Website:| geba-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID33048: Email Messages Distributing Malicious Software on June 25, 2018

Medium Alert ID: 58288 First Published: 2018 June 25 19:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33048 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33050: Email Messages Distributing Malicious Software on June 25, 2018

Medium Alert ID: 58291 First Published: 2018 June 25 19:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33050 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33044: Email Messages Distributing Malicious Software on June 25, 2018

Medium Alert ID: 58289 First Published: 2018 June 25 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33044 may contain the following files: Name | Siz...

Design/Logic Flaw

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php...

costadelvesuvio.federalberghi.it XSS vulnerability

Open Bug Bounty ID: OBB-636260 Description| Value ---|--- Affected Website:| costadelvesuvio.federalberghi.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser) Vulnerability

Exploit for hardware platform in category web applications Exploit title: Ecessa WANWorx WVR-30 input type="hidden" name="userusername1" value=...

Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser)

Exploit title: Ecessa WANWorx WVR-30 input type="hidden" name="userenabled1" value="o...

web.gideononline.com XSS vulnerability

Open Bug Bounty ID: OBB-635535 Description| Value ---|--- Affected Website:| web.gideononline.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...