CXSECURITY.COM Free Security List
WEBCVE-2024-45073. IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Exploit Database - Site 1 - CXSECURITY
WEBApr 2, 2015 · Site 1 of WLB Exploit Database is a huge collection of information on data communications safety.
Dorks List - CXSecurity.com
WEBDorks List WLB2 G00GLEH4CK. See examples for inurl, intext, intitle, powered by, version, designed etc. Designed to support the cert
BeyondTrust Remote Support 6.0 Cross Site Scripting
WEBMalcrove has realised a new security note BeyondTrust Remote Support 6.0 Cross Site Scripting
Show CWE-276: Incorrect Default Permissions - CXSecurity.com
WEBIncorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via …
CVEMAP Site 1 - CXSECURITY.COM
WEBCVE-2024-20350. A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the ...
Show CWE-89: Improper Neutralization of Special Elements
WEBThis vulnerability affects unknown code of the file /forgot.php. The manipulation of the argument useremail leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CVE-2024-9328. Updating... A vulnerability was found in SourceCodester Advocate Office Management System 1.0.
WordPress WP Forms 1.6.3.1 Cross SIte Scripting - CXSECURITY
WEBNov 19, 2020 · ZwX has realised a new security note WordPress WP Forms 1.6.3.1 Cross SIte Scripting
Dorks List Site 1 - CXSecurity.com
WEBTopic Date Credit; High: MD-Pro 1.0.76 Shell Upload / SQL Injection Dork: intext: Powered by MD-Pro 05.10.2024: Emiliano Febbi: Med. krishna Tech - Sql Injection Dork: "Website Developed By krishna Tech" 30.09.2024: behrouz mansoori
Vulnerability CVE-2018-19410 - CXSECURITY
WEBCVE-2018-19410. PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a …