14397 matches found
Unauthorized Access Vulnerability in Website Building System of Siltronic Ltd.
Siltronic is committed to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. An unauthorized access vulnerability exists in SCT's website building system, which can be exploited by...
Wenzhou Orange Tree Network Technology Co., Ltd. website building system has file upload vulnerability
Wenzhou Orange Tree Network Technology Co., Ltd. is a foreign trade marketing consulting services company, focusing on search engine keyword advertising, search engine optimization SEO technology, search engine marketing SEM consulting and optimized for the search engine website construction...
Shanghai Yijue Network Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-16460)
The business scope of Shanghai Yijue Network Technology Co., Ltd. includes technical development, technology transfer, technical consultation, technical services in the field of network technology, computer technology, information technology, computer network engineering and so on. Shanghai Yijue...
The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system for small and medium-sized businesses lies in the lack of security measures for the website structure. This allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Weak Password Vulnerability in Jabil Firewall Management System, Jabil SSLVPN Management System, Jabil Website Security Monitoring
Xi'an Jiaotong University Jiepu Network Technology Co., Ltd. is a first-class professional network security products and technology provider in China. Jabil Firewall Management System, Jabil SSLVPN Management System, Jabil Website Security Monitoring has a weak password vulnerability that can be...
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
The ZebraForm PHP library v2.9.8 latest and below, used by some WordPress plugins, is affected by reflected Cross-Site Scripting issues in its process.php file. There is currently no patch available and the removal of this library is recommended. Via $GET'form': &control=upload" method="post"...
Jenzabar 9.2.2 - 'query' Reflected XSS.
Exploit Title: Jenzabar 9.2.2 - 'query' Reflected XSS. Date: 2021–02–06 Exploit Author: y0ungdst Vendor Homepage: https://jenzabar.com Version: Jenzabar — v9.2.0-v9.2.1-v9.2.2 and maybe other versions Tested on: Windows 10 CVE : CVE-2021–26723 -Description: A Reflected Cross-site scripting XSS...
SEO Panel 4.6.0 Remote Code Execution
Exploit Title: SEO Panel 4.6.0 - Remote Code Execution 2 Date: 22 Jan 2021 Exploit Author: Kr0ff Vendor Homepage: https://www.seopanel.org/https://www.kentico.com/ Software Link: https://www.seopanel.org/spdownload/4.6.0 Version: 4.6.0 Tested on: Ubuntu 20.04 !/usr/bin/env python3 ''' DESCRIPTION...
SQL Injection Vulnerability in Website Building System of Shenzhen Armed Network Technology Development Co.
Shenzhen at hand network technology development limited company business scope includes: computer database, computer system analysis; provide computer technical services; business e-commerce and so on. Ltd. station building system SQL injection vulnerability, attackers can use the vulnerability t...
Courier: Rate limit function bypass can leads to occur huge critical problem into website.
Hello team, I have found a technique that can easily bypass rate limit system of website and with this bug we attacker can easily attack into login panel, Sent unlimited number of huge notification to victim, bypass OTP codes and takeover accounts etc. Basically i have added a header...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2020-29247
WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...
U.S. Dept Of Defense: Reflected XSS on ███
Summary Reflected XSS on █████████ for invalid paths. Description Requesting a non-existent path on █████, such as https://██████████/chron0x the site responds with No jsonpage404 is /chron0x versus /chron0x./chron0x does not exist. As it can be seen, the path is reflected. This can be exploited...
4 Free Online Cyber Security Testing Tools For 2021
Set of must-have online security tools that we believe may make a real difference to your cybersecurity program and improve your 2021 budget planning. In September, Gartner published a list of "Top 9 Security and Risk Trends for 2020" putting a bold emphasis on the growing complexity and size of...
Widespread Scans Underway for RCE Bugs in WordPress Websites
Millions of malicious scans are rolling across the internet, looking for known vulnerabilities in the Epsilon Framework for building WordPress themes, according to researchers. According to the Wordfence Threat Intelligence team, more than 7.5 million probes targeting these vulnerabilities have...
CVE-2020-26965
Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field wa...
Online Shoppers Undeterred by COVID as Holiday Shopping Season Shifts Earlier
Akamai-Commissioned Survey Hints at Significant Business Consequences If Online Retail Experiences Do Not Meet Consumer Expectations Holiday shoppers are overcoming worries and restrictions and easily adapting to new shopping norms as the COVID-19 pandemic has invaded our lives and made us...
davidfrostphotography.com Cross Site Scripting vulnerability OBB-1500424
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
planonegociosimobiliarios.com.br Cross Site Scripting vulnerability OBB-1496866
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
alexandreetlesconquerants.exploratv.ca Cross Site Scripting vulnerability OBB-1494952
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...