MariaDB: [downloads.mariadb.org] CRLF injection in case of encoded query mark

A CRLF injection vulnerability was reported and fixed for our downloads.mariadb.org website. The attack could lead to cookie injection, HTTP response splitting and session fixation attacks, amongst other things, across mariadb domains...

CMSsite 1.0 SQL Injection

Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari [email protected] Date: 2019-01-27 Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1.0 Tested on: Windows 10 CVE: N/A...

DomainMOD Detection (HTTP)

HTTP based detection of DomainMOD. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113326";...

Hucart CMS 5.7.4 - Cross-Site Request Forgery (Add Administrator Account)

Hucart CMS 5.7.4 - Cross-Site Request Forgery Add Administrator Account function posturl,fields var p = document.createElement"form"; p.action = url; p.innerHTML = fields; p.target = "self"; p.method = "post"; document.body.appendChildp; p.submit; function csrfhack var fields; fields += ""; field...

bata.in Cross Site Scripting vulnerability OBB-723423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| bata.in ---|--- Open Bug Bounty Program...

Mantis 2.11.1 Cross Site Scripting

Reflected Cross-site Scripting in Mantis 2.11.1 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Mantis 2.11.1 Affected Software: Mantis Affected Versions: 2.11.1 Homepage: https://www.mantisbt.org/ Vulnerability: Cross-site Scripting Severity: Mediu...

unCAPTCHA AI Cracks Google reCAPTCHAs with 90% Accuracy

unCAPTCHA, an artificial intelligence-based automated system designed at the University of Maryland, has been updated to break Google’s latest audio-based reCAPTCHA challenges with an accuracy rate of 90 percent. Google has been working on refining and strengthening reCAPTCHA for years, a Turing...

amt-seelow-land.de XSS vulnerability

Open Bug Bounty ID: OBB-719758 Description| Value ---|--- Affected Website:| amt-seelow-land.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

parsianjoosh.com XSS vulnerability

Open Bug Bounty ID: OBB-719584 Description| Value ---|--- Affected Website:| parsianjoosh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

pkrhosting.co.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-719449 Description| Value ---|--- Affected Website:| pkrhosting.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...

confectionerycorner.com.au XSS vulnerability

Open Bug Bounty ID: OBB-719315 Description| Value ---|--- Affected Website:| confectionerycorner.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

shopcarinsurancequotes.com XSS vulnerability

Open Bug Bounty ID: OBB-719240 Description| Value ---|--- Affected Website:| shopcarinsurancequotes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

brico-fenetre.com XSS vulnerability

Open Bug Bounty ID: OBB-719074 Description| Value ---|--- Affected Website:| brico-fenetre.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

goldcrop.ie XSS vulnerability

Open Bug Bounty ID: OBB-718878 Description| Value ---|--- Affected Website:| goldcrop.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

opportunity-china.com XSS vulnerability

Open Bug Bounty ID: OBB-718700 Description| Value ---|--- Affected Website:| opportunity-china.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

sc62.ru XSS vulnerability

Open Bug Bounty ID: OBB-718380 Description| Value ---|--- Affected Website:| sc62.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

digitalinsuranceagenda.com XSS vulnerability

Open Bug Bounty ID: OBB-718345 Description| Value ---|--- Affected Website:| digitalinsuranceagenda.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

cityplaces.info XSS vulnerability

Open Bug Bounty ID: OBB-718297 Description| Value ---|--- Affected Website:| cityplaces.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

autokama.ru XSS vulnerability

Open Bug Bounty ID: OBB-718282 Description| Value ---|--- Affected Website:| autokama.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

cartuning.in.ua XSS vulnerability

Open Bug Bounty ID: OBB-718093 Description| Value ---|--- Affected Website:| cartuning.in.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...