278 matches found
U.S. Dept Of Defense: HTML Injection + XSS Vulnerability - https://████████/ | Proof of Concept [PoC]
Hello U.S. Dept Of Defense Security Team, My name is Ismail Tasdelen. As a security researcher. I found a html injection and xss vulnerability. Url address : https://█████████/ HTML Injection + XSS Payload = html+injection+xss"Ismail Tasdelen Descripton : The server reads data directly from the...
CVE-2018-14388
joyplus-cms 1.6.0 has XSS via the manager/adminajax.php cansearchdevice array parameter...
Neatly bypassing CSP
How to trick CSP in letting you run whatever you want By bo0om, Wallarm research Content Security Policy or CSP is a built-in browser technology which helps protect from attacks such as cross-site scripting XSS. It lists and describes paths and sources, from which the browser can safely load...
CVE-2018-10554
An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in 1 the Schedule New Report screen via the hour, minute, or ampm parameter, related to components/scheduledreporting; 2 includes/components/xicore/downtime.php, related to the updatepages function; 3 the ajaxhelper.ph...
Design/Logic Flaw
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
YxtCMF the latest version of an XSS
No description provided by source...
YxtCMF最新版一处XSS3
No description provided by source...
indiatree.com XSS vulnerability
Vulnerable URL: http://www.indiatree.com/indexmobile.php?Aspect=1"...
OurPHP stored xss
No description provided by source...
agi.it XSS vulnerability
Vulnerable URL: http://www.agi.it/search/?s=prompt'OPENBUGBOUNTY'...
Mindoktor: Storing sensitive information on cookie post-registration
Hello, I've noticed that upon registering the server sets a cookie named clinicclinic.PENTESTFLASH. In it, it stores all the information the user used to register. Sample request: POST /user/register HTTP/1.1 Host: clinic.pentest.mindoktor.io User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.1...
erduo music \source\user\blog\ajax.php the variable content stored XSS
No description provided by source...
nextag.com XSS vulnerability
Vulnerable URL: http://www.nextag.com/serv/main/buyer/OutPDir.jsp?search='...
appcms 1.3.960 储存型xss漏洞
No description provided by source...
business.com XSS vulnerability
Vulnerable URL: https://www.business.com/search/?q=asd"...
Aruba Mobility Controller 6.4.2.8 - CSRF And XSS Vulnerabilities
Exploit for hardware platform in category web applications Title: Aruba Mobility Controller CSRF And XSS Vulnerabilities Date: 08/016/2015 Author: Itzik Chen itzik1 at gmail.com Product web page: http://www.arubanetworks.com Affected Version: 6.4.2.8 Tested on: Aruba7240, Ver 6.2.4.8 Summary...
Shareaholic 7.6.0.3 Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Shareaholic 7.6.0.3 XSS Date: 10-11-2014 Software Link: https://wordpress.org/plugins/shareaholic/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ CVE: CVE-2014-9311...
Magento Server MAGMI Plugin - Multiple Vulnerabilities
Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting Software Link: http://sourceforge.net/projects/magmi/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 5-2-2015 ExploitLocal file inclusion :...
OWASP Xenotix XSS Exploit Framework 6
OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting XSS vulnerability detection and exploitation framework. Xenotix provides Zero False Positive XSS Detection by performing the Scan within the browser engines where in real world, payloads get reflected. Xenotix Scanner Module ...
PHP Stock Management System 1.02 - Multiple Vulnerabilty
No description provided by source. Exploit Title: PHP Stock Management System 1.02 - Multiple Vulnerabilty Date : 9-9-2014 Author : jsass Vendor Homepage: http://www.posnic.com/ Software Link: http://sourceforge.net/projects/stockmanagement/ Version: 1.02 Tested on: kali linux Twitter :...