si

CentOS 7.6.1810 Control Web Panel 0.9.8.837 Cross Site Request Forgery

CentOS version 7.6.1810 with Control Web Panel version 0.9.8.837 suffers from a cross site request forgery vulnerability.




si

DotNetNuke CMS 9.5.0 File Extension Check Bypass

DotNetNuke CMS version 9.5.0 suffers from file extension check bypass vulnerability that allows for arbitrary file upload.




si

SITS:Vision 9.7.0 Authentication Bypass

An authentication bypass vulnerability is present in the stand-alone SITS:Vision component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This vulnerability allows unauthenticated attackers to gain access to credentials or execute arbitrary SQL queries on the SITS backend as long as they have access to the client executable or can intercept traffic from a user who does. Version 9.7.0 is affected.




si

Django 3.0 Cross Site Request Forgery

Django version 3.0 suffers from a cross site request forgery token bypass vulnerability.




si

Nissan Car Secretly Shares Driver Data With Websites




si

Nexus Repository Manager 3.21.1-01 Remote Code Execution

This Metasploit module exploits a Java Expression Language (EL) injection in Nexus Repository Manager versions up to and including 3.21.1 to execute code as the Nexus user. Tested against 3.21.1-01.










si

User Management System 2.0 Cross Site Scripting

User Management System version 2.0 suffers from a persistent cross site scripting vulnerability.




si

Complaint Management System 4.2 Cross Site Scripting

Complaint Management System version 4.2 suffers from a persistent cross site scripting vulnerability.




si

jQuery html() Cross Site Scripting

jQuery versions prior to 3.5 suffer from an html() cross site scripting vulnerability.




si

Open-AudIT 3.3.0 Cross Site Scripting

Open-AudIT version 3.3.0 suffers from a cross site scripting vulnerability.




si

Geeklog 2.2.1 Cross Site Scripting

Geeklog version 2.2.1 suffers from a cross site scripting vulnerability.




si

POS PHP 17.5 Cross Site Scripting

POS PHP version 17.5 suffers from a persistent cross site scripting vulnerability.




si

Easy Transfer 1.7 Cross Site Scripting / Directory Traversal

Easy Transfer version 1.7 for iOS suffers from cross site scripting and directory traversal vulnerabilities.




si

ChemInv 1 Cross Site Scripting

ChemInv version 1 suffers from a persistent cross site scripting vulnerability.




si

Online Scheduling System 1.0 Cross Site Scripting

Online Scheduling System version 1.0 suffers from a persistent cross site scripting vulnerability.




si

PHP-Fusion 9.03.50 Cross Site Scripting

PHP-Fusion version 9.03.50 suffers from a persistent cross site scripting vulnerability.




si

osTicket 1.14.1 Cross Site Scripting

osTicket version 1.14.1 suffers from a persistent cross site scripting vulnerability.




si

WordPress WooCommerce Advanced Order Export 3.1.3 Cross Site Scripting

WordPress WooCommerce Advanced Order Export plugin version 3.1.3 suffers from a cross site scripting vulnerability.




si

Online Clothing Store 1.0 Cross Site Scripting

Online Clothing Store version 1.0 suffers from a persistent cross site scripting vulnerability.




si

Sentrifugo CMS 3.2 Cross Site Scripting

Sentrifugo CMS version 3.2 suffers from a persistent cross site scripting vulnerability.




si

iChat 1.6 Cross Site Scripting

iChat version 1.6 suffers from a cross site scripting vulnerability.




si

OpenZ ERP 3.6.60 Cross Site Scripting

OpenZ ERP version 3.6.60 suffers from a persistent cross site scripting vulnerability.




si

Draytek VigorAP Cross Site Scripting

Draytek VigorAP suffers from a persistent cross site scripting vulnerability. Multiple different versions are affected.




si

Tiny MySQL Cross Site Scripting

Tiny MySQL suffers from a cross site scripting vulnerability.




si

WebTareas 2.0p8 Cross Site Scripting

WebTareas version 2.0p8 suffers from a cross site scripting vulnerability.




si

WordPress Dosimple Theme 2.0 Cross Site Scripting

WordPress Dosimple theme version 2.0 suffers from a cross site scripting vulnerability.










si

.NET Instrumentation Via MSIL Bytecode Injection

Whitepaper from Phrack called .NET Instrumentation via MSIL bytecode injection.




si

CHIYU BF430 TCP IP Converter Cross Site Scripting

CHIYU BF430 TCP IP Converter suffers from a persistent cross site scripting vulnerability.





si

Yes, You Can Remotely Hack Factory, Building Site Cranes. Wait, What?






si

GNU SIP Witch Telephony Server 0.7.2

GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP rver, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.




si

GNU SIP Witch Telephony Server 0.7.3

GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP rver, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.




si

GNU SIP Witch Telephony Server 0.7.4

GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP rver, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.




si

GNU SIP Witch Telephony Server 0.8.0

GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP rver, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.




si

GNU SIP Witch Telephony Server 0.8.3

GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP rver, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.




si

SIPVicious Tool Suite 0.2.6

SIPVicious tools address the need for traditional security tools to be ported to SIP. This package consists of a SIP scanner, a SIP wardialer, and a SIP PBX cracker. Written in Python.