all things security

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 15,079

XSS Files

Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS

Posted Jul 22, 2017

Authored by Owais Mehtab, Tayeeb Rana

Oracle Web Center versions 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0 suffer from a cross site scripting vulnerability.

tags | exploit, web, xss

advisories | CVE-2017-10075

MD5 | 1e3f00f41f33004fa4e281208e66410b

Download | Favorite | Comments (0)

PeopleSoft ToolsRelease 8.55.03 / ToolsReleaseDB 8.55 / HCM 9.2 XSS

Posted Jul 21, 2017

Authored by Dmitri Iudin

PeopleSoft ToolsRelease version 8.55.03, ToolsReleaseDB version 8.55, and HCM version 9.2 suffer from a TestServlet cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2017-10106

MD5 | 8a037c93fb00af442cd3d7d4c290d773

Download | Favorite | Comments (0)

WordPress Task Manager Pro 1.31 Cross Site Scripting

Posted Jul 19, 2017

Authored by 8bitsec

WordPress Task Manager Pro version 1.31 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 277685ee784f659f986136cf25ef9665

Download | Favorite | Comments (0)

PEGA Platform 7.2 ML0 Missing Access Control / Cross Site Scripting

Posted Jul 17, 2017

Authored by Daniel Correa

PEGA Platform versions 7.2 ML0 and below suffer from missing access control and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2017-11355, CVE-2017-11356

MD5 | 938c5f42465df06a9e5c4c2fc3e83ed2

Download | Favorite | Comments (0)

Orangescrum 1.6.1 File Upload / Cross Site Scripting

Posted Jul 17, 2017

Authored by tomplixsee

Orangescrum version 1.6.1 suffers from cross site scripting and remote file upload vulnerabilities.

tags | exploit, remote, vulnerability, xss, file upload

MD5 | 9693daf187246491e666ce159587cc45

Download | Favorite | Comments (0)

Vodafone Italia Webmail Cross Site Scripting

Posted Jul 13, 2017

Authored by theMiddle

Vodafone Italia's webmail system suffers from a cross site scripting vulnerability that can be leveraged via an incoming email.

tags | exploit, xss

MD5 | d0d7db3a1272f4db6715ac4f88d6f69f

Download | Favorite | Comments (0)

Apache Open Meetings 3.2.0 Cross Site Scripting

Posted Jul 13, 2017

Authored by Security Innovation

Apache Open Meetings version 3.2.0 suffers from a cross site scripting vulnerability.

tags | advisory, xss

advisories | CVE-2017-7663

MD5 | 9e8232ac589f00d065c50a41985205d0

Download | Favorite | Comments (0)

Sitecore CMS 8.2 Cross Site Scripting / File Disclosure

Posted Jul 13, 2017

Authored by Usman Saeed

Sitecore CMS version 8.2 suffers from cross site scripting and file disclosure vulnerabilities.

tags | exploit, vulnerability, xss, info disclosure

MD5 | 4858233c0ae712bdc0b065aba7a0cab1

Download | Favorite | Comments (0)

RSA Authentication Manager 8.2 SP1 Cross Site Scripting

Posted Jul 13, 2017

Site emc.com

RSA Authentication Manager versions 8.2 SP1 and below suffer from a stored cross site scripting vulnerability.

tags | advisory, xss

advisories | CVE-2017-8000

MD5 | ae44f3bc0782d5d9b8cbf572c21a6d09

Download | Favorite | Comments (0)

RSA Identity Governance And Lifecycle File Upload / XSS

Posted Jul 13, 2017

Site emc.com

Multiple RSA Identity Governance and Lifecycle products suffer from remote file upload and cross site scripting vulnerabilities. Affected products include RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels, RSA Via Lifecycle and Governance version 7.0, all patch levels, and RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels.

tags | advisory, remote, vulnerability, xss, file upload

advisories | CVE-2017-8004, CVE-2017-8005

MD5 | e4d5560e1af72698b914df2a682e9f6b

Download | Favorite | Comments (0)

Red Hat Security Advisory 2017-1739-01

Posted Jul 12, 2017

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2017-1739-01 - OpenStack Dashboard provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Security Fix: A cross-site scripting flaw was discovered in the OpenStack dashboard which allowed remote authenticated administrators to conduct XSS attacks using a crafted federation mapping rule. For this flaw to be exploited, federation mapping must be enabled in the dashboard.

tags | advisory, remote, xss

systems | linux, redhat

advisories | CVE-2017-7400

MD5 | 95af0406275f158f0085ef9a2ede7899

Download | Favorite | Comments (0)

AGFEO Smart Home ES 5xx / 6xx Authentication Bypass / XSS / Hardcoded Credentials

Posted Jul 12, 2017

Authored by T. Weber | Site sec-consult.com

AGFEO Smart Home ES 5xx / 6xx versions 1.9b and 1.10 suffers from authentication bypass, cross site scripting, and hard-coded private key vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | d8b060c4416bc13adecea2847e56ea96

Download | Favorite | Comments (0)

ObjectPlanet Opinio 7.6.3 Cross Site Scripting

Posted Jul 12, 2017

Authored by Kasper Karlsson

ObjectPlanet Opinio versions 7.6.3 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2017-10798

MD5 | 2c6e538a5255abbbe63a715b422d9339

Download | Favorite | Comments (0)

RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting

Posted Jul 12, 2017

Authored by sultan albalawi

RaidenHTTPD version 2.0.44 suffers from a cross site scripting vulnerability via the user-agent header.

tags | exploit, xss

MD5 | 280b6748678ae5a593570faa3573d0a8

Download | Favorite | Comments (0)

HP Security Bulletin HPESBGN03762 1

Posted Jul 11, 2017

Authored by HP | Site hp.com

HP Security Bulletin HPESBGN03762 1 - Potential security vulnerabilities have been identified in HPE Network Node Manager i. The vulnerabilities could be remotely exploited to allow bypass security restrictions, cross-site scripting (XSS), and/or URL redirection. Revision 1 of this advisory.

tags | advisory, vulnerability, xss

advisories | CVE-2017-8948

MD5 | 0381a18a7544fb7fb594274929cf5fe3

Download | Favorite | Comments (0)

Shenzhen C-Data CD7201 Command Injection / Cross Site Scripting

Posted Jul 11, 2017

Authored by Codex Lynx

Shenzhen C-Data CD7201 with software version 2.4.6b and firmware version 7.1.0 suffer from authentication bypass, command injection, and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 2f2406c1fed6720250bfb64cda0f49c8

Download | Favorite | Comments (0)

Rise Ultimate Project Manager 1.8 Cross Site Scripting

Posted Jul 10, 2017

Authored by 8bitsec

Rise Ultimate Project Manager version 1.8 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 777631a23b625f4d7d95e352bf19262c

Download | Favorite | Comments (0)

Pulse Connect Secure 8.3R1 CSRF / XSS

Posted Jul 10, 2017

Authored by sxcurity | Site insecurity.zone

Pulse Connect Secure version 8.3R1 suffer from cross site scripting and cross site request forgery vulnerabilities.

tags | exploit, vulnerability, xss, csrf

MD5 | f881d55ec2c771f14be93daa0a0887bf

Download | Favorite | Comments (0)

Yaws 2.0 Cross Site Scripting

Posted Jul 4, 2017

Authored by sultan albalawi

Yaws server version2.0 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | e8a85c148e887e014427c7e9c438d040

Download | Favorite | Comments (0)

Xenforo Forum CMS 1.5.13 Cross Site Scripting

Posted Jul 3, 2017

Authored by Project Insecurity, MLT | Site insecurity.zone

Xenforo Forum CMS version 1.5.13 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 4049540e25d622043fb619c1860d275b

Download | Favorite | Comments (0)

Webmin 1.840 Cross Site Scripting

Posted Jul 3, 2017

Authored by Andy Tan

Webmin version 1.840 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2017-9313

MD5 | bb51602cc1da9c4e34fe8d5f821ccdd0

Download | Favorite | Comments (0)

Humax Digital HG100R 2.0.6 XSS / Information Disclosure

Posted Jul 3, 2017

Authored by The Gambler

Humax Digital HG100R version 2.0.6 suffers from backup disclosure, root credential disclosure, and cross site scripting vulnerabilities.

tags | exploit, root, vulnerability, xss, info disclosure

advisories | CVE-2017-7315, CVE-2017-7316

MD5 | d929ed2b472ae8a416c2a4ab898c7996

Download | Favorite | Comments (0)

RSA Archer GRC 6.2.0.2 CSRF / XSS / Bypass / Open Redirect

Posted Jul 1, 2017

Site emc.com

RSA Archer GRC version 6.2.0.2 suffers from bypass, cross site request forgery, information disclosure, open redirection, and cross site scripting vulnerabilities.

tags | advisory, vulnerability, xss, info disclosure, csrf

advisories | CVE-2017-4998, CVE-2017-4999, CVE-2017-5000, CVE-2017-5001, CVE-2017-5002

MD5 | 6cf471214abe6297b8b4c071b0aa43fd

Download | Favorite | Comments (0)

Microsoft Dynamic CRM 2016 Cross Site Scripting

Posted Jun 30, 2017

Authored by Gregory Draperi

Microsoft Dynamic CRM 2016 versions SP1 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 6edb82874ea081b8edfc3b1e81d10c4d

Download | Favorite | Comments (0)

Trihedral VTScada DoS / XSS / Information Disclosure

Posted Jun 30, 2017

Authored by Karn Ganeshen

Trihedral VTScada versions prior to 11.2.26 suffer from resource consumption, cross site scripting, and information disclosure vulnerabilities.

tags | advisory, vulnerability, xss, info disclosure

MD5 | cb976665ca752634c866774df96acaff

Download | Favorite | Comments (0)