undertow: improper whitespace parsing leading to potential HTTP request smuggling

It was discovered that Undertow processes http request headers with unusual whitespaces which can cause possible http request smuggling...

undertow: improper whitespace parsing leading to potential HTTP request smuggling

It was discovered that Undertow processes http request headers with unusual whitespaces which can cause possible http request smuggling...

secure.utah.gov XSS vulnerability

Open Bug Bounty ID: OBB-481749 Description| Value ---|--- Affected Website:| secure.utah.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID31703: Email Messages Distributing Malicious Software on December 29, 2017

Medium Alert ID: 56337 First Published: 2018 January 2 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31703 may contain the following files: Name |...

Threat Outbreak Alert RuleID31702: Email Messages Distributing Malicious Software on December 28, 2017

Medium Alert ID: 56336 First Published: 2018 January 2 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31702 may contain the following files: Name |...

Threat Outbreak Alert RuleID31697: Email Messages Distributing Malicious Software on December 26, 2017

Medium Alert ID: 56332 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31697 may contain the following files: Name |...

Threat Outbreak Alert RuleID31680: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56330 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31680 may contain the following files: Name |...

Threat Outbreak Alert RuleID31673: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56329 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31673 may contain the following files: Name |...

Threat Outbreak Alert RuleID31671: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56328 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31671 may contain the following files: Name |...

Threat Outbreak Alert RuleID31651: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56327 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31651 may contain the following files: Name |...

CVE-2018-3811

The information set confirms CVE-2018-3811 affects the WordPress Oturia Smart Google Code Inserter plugin prior to v3.5. The root cause is an SQL Injection in saveGoogleAdWords() where $_POST["oId"] is unsafely interpolated into an SQL query without prepared statements or input sanitization, allo...

Web Security Dog (IIS Edition) Upload Bypass Vulnerability

Website Security Dog IIS Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features for comprehensive website security. Web Security Dog IIS Version V4.0.20336 has an upload bypass vulnerability that allows...

WBiz Desk 1.0 Cross Site Scripting

Exploit Title: WBiz Desk - Simple and Effective Help Desk System - xss Google Dork: "Powered by WeBiz Digital" Date: 2017/30/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Software Buy: https://www.codester.com/items/5641/wbiz-desk-simple-and-effective-help-desk-system Demo:...

ZKTeco ZKBioSecurity 3.0 User Enumeration Weakness

Summary ZKBioSecurity3.0 is the ultimate "All in One" web based security platform developed by ZKTeco. It contains four integrated modules: access control, video linkage, elevator control and visitor management. With an optimized system architecture designed for high level biometric identificatio...

sunvitaproperties.com XSS vulnerability

Open Bug Bounty ID: OBB-462995 Description| Value ---|--- Affected Website:| sunvitaproperties.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Arbitrary File Deletion Vulnerability in IWebShop CMS Backend

iWebShop is an open source WEB e-commerce B2B2C building system based on the HP language and MYSQL database development , using the MVC architecture Yii framework thinking design mode of a product . IWebShop CMS backend exists arbitrary file deletion vulnerability. Attackers can use this...

tidyform.com XSS vulnerability

Open Bug Bounty ID: OBB-461814 Description| Value ---|--- Affected Website:| tidyform.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

blanzac.fr XSS vulnerability

Open Bug Bounty ID: OBB-459562 Description| Value ---|--- Affected Website:| blanzac.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

ville-layrac.fr XSS vulnerability

Open Bug Bounty ID: OBB-459420 Description| Value ---|--- Affected Website:| ville-layrac.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

blinkyspens.com XSS vulnerability

Open Bug Bounty ID: OBB-457590 Description| Value ---|--- Affected Website:| blinkyspens.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...