14397 matches found
Bypass Vulnerability in Website Security Dog's SQL Injection Blocking Feature (CNVD-2019-41613)
Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. A bypass vulnerability exists in the SQL injection blocking feature of Website Security Dog. An attacker can bypass the SQL injection blocking feature of Website...
A Comprehensive Guide On How to Protect Your Websites From Hackers
Humankind had come a long way from the time when the Internet became mainstream. What started as a research project ARPANET Advanced Research Projects Agency Network funded by DARPA has grown exponentially and has single-handedly revolutionized human behavior. When WWW world wide web came into...
imcopack.com Cross Site Scripting vulnerability
Security Researcher Dipu1A Helped patch 960 vulnerabilities Received 5 Coordinated Disclosure badges Received 20 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting imcopack.com website and its users. Following coordinated an...
igc1.finances.gouv.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-991362 Security Researcher Rbcafe Helped patch 261 vulnerabilities Received 3 Coordinated Disclosure badges Received 8 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting igc1.finances.gouv.fr website...
U.S. Dept Of Defense: default ████ creds on https://████████
Description: I can log into https://███ using █████ as credentials Impact Can do anything an ██████████ can do in this application, Server Now Step-by-step Reproduction Instructions 1. go to https://███████ 2. log in using ██████████ Suggested Mitigation/Remediation Actions use proper...
picarchiv.de Improper Access Control vulnerability
Security Researcher Rooghz Helped patch 446 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting picarchiv.de website and its users. Following coordinated an...
annuaire.histoiredefrance.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-990020 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
vBulletin Releases Patch Update for New RCE and SQLi Vulnerabilities
After releasing a patch for a critical zero-day remote code execution vulnerability late last month, vBulletin has recently published a new security patch update that addresses 3 more high-severity vulnerabilities in its forum software. If left unpatched, the reported security vulnerabilities,...
dmt.aitdomains.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-988353 Security Researcher shivprsadsammbhare Helped patch 450 vulnerabilities Received 3 Coordinated Disclosure badges Received 6 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting dmt.aitdomains.com...
jpss.jp Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-987129 Security Researcher MrAbhishek740 Helped patch 16 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting jpss.jp website and its users. Following coordinate...
U.S. Dept Of Defense: Information disclousure by clicking on the link shown in http://████████/
Description: Looking at some subdomains using aquatone I noticed http://█████/ I clicked it and then started navigating the page, if I go to this link: https://█████████/██████████wireframes/admin/round12/tsp0-awarded.html it is completely valid and shows some information that I'm unsure it shoul...
help.intranetdashboard.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-984870 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting help.intranetdashboard.com...
tattooanal.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-984554 Security Researcher devl00p Helped patch 3000 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting tattooanal.com website an...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to execute a cross-site scripting attack.
The vulnerability of Active Directory Federation Services ADFS on Windows operating systems is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request...
DotNetNuke Cross Site Scripting
Exploit Title: Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 Exploit Description : This exploit will add a superuser to target DNN website. Exploit Condition : Successful exploitation occurs when an admin user visits a notification page. Exploit Author: MAYASEVEN CVE :...
bjjgisupply.com Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting bjjgisupply.com website and its users. Following...
Exploit for SQL Injection in Phpipam
CVE-2019-166...
How to Secure a Website by Monitoring DNS Records
By Waqas Although you may have ignored their existence, DNS servers are vital in creating DNS records and provide information about a domain or hostname, more specifically its current IP address. Here are some common DNS records. This is a post from HackRead.com Read the original post: How to...
Unpatched Bug Under Active Attack Threatens WordPress Sites with XSS
An unpatched vulnerability in the Rich Reviews plugin for WordPress is putting an estimated 16,000 sites in danger of stored cross-site scripting XSS attacks. Sites running the plugin are vulnerable to unauthenticated plugin option updates, which can be used to deliver malware payloads; and...
queensheadpinner.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-978967 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting queensheadpinner.co.uk...