14981 matches found
Prestashop 8.0.4 - Cross-Site Scripting Vulnerability
Exploit Title: Prestashop 8.0.4 - Cross-Site Scripting XSS Application: prestashop Version: 8.0.4 Bugs: Stored XSS Technology: PHP Vendor URL: https://prestashop.com/ Software Link: https://prestashop.com/prestashop-edition-basic/ Date of found: 30.06.2023 Author: Mirabbas Ağalarov Tested on: Lin...
WebsiteBaker v2.13.3 - Stored XSS Vulnerability
Exploit Title: WebsiteBaker v2.13.3 - Stored XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author: Mirabbas Ağalarov...
SPIP v4.1.10 - Spoofing Admin account Vulnerability
Exploit Title: spip v4.1.10 - Spoofing Admin account Author: nu11secur1ty Vendor: https://www.spip.net/enrubrique25.html Software: https://files.spip.net/spip/archives/spip-v4.1.10.zip Reference: https://www.crowdstrike.com/cybersecurity-101/spoofing-attacks/ Description: The malicious user can...
Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting Vulnerability
Exploit Title: Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting XSS Exploit Author: tmrswrr Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: v15.0 POC: 1 Login in demo page , go to this url...
Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS)
Exploit Title: Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting XSS Date: 1/07/2023 Exploit Author: tmrswrr Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: v15.0 POC: 1 Login in demo page , go to this url...
WebsiteBaker 2.13.3 Cross Site Scripting
Exploit Title: WebsiteBaker v2.13.3 - Stored XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author: Mirabbas Ağalarov...
WebsiteBaker v2.13.3 - Stored XSS
Exploit Title: WebsiteBaker v2.13.3 - Stored XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author: Mirabbas Ağalarov...
Prestashop 8.0.4 Cross Site Scripting
Exploit Title: Prestashop 8.0.4 - Cross-Site Scripting XSS Application: prestashop Version: 8.0.4 Bugs: Stored XSS Technology: PHP Vendor URL: https://prestashop.com/ Software Link: https://prestashop.com/prestashop-edition-basic/ Date of found: 30.06.2023 Author: Mirabbas Ağalarov Tested on: Lin...
spip v4.1.10 - Spoofing Admin account
Exploit Title: spip v4.1.10 - Spoofing Admin account Author: nu11secur1ty Date: 06.29.2023 Vendor: https://www.spip.net/enrubrique25.html Software: https://files.spip.net/spip/archives/spip-v4.1.10.zip Reference: https://www.crowdstrike.com/cybersecurity-101/spoofing-attacks/ Description: The...
OESA-2023-1387 qt5-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security HSTS header, allowing unencrypted connections to be established,...
GHSA-7GRW-XFX6-QHX6 Joplin Cross-site Scripting vulnerability
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
Joplin Cross-site Scripting vulnerability
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
Design/Logic Flaw
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
Joplin cross-site scripting vulnerabilities
Joplin is an open source notes and to-do list application. A security vulnerability exists in Joplin versions prior to 2.11.5, which stems from a cross-site scripting XSS attack allowed via the USE element in SVG documents...
CVE-2023-37298: Improper Neutralization of Input During Web Page Generation
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
PT-2023-4626 · Joplin · Joplin
Name of the Vulnerable Software and Affected Versions: Joplin versions prior to 2.11.5 Description: The issue is related to the lack of protection of the web page structure in the Joplin note-taking application, which can be exploited by a remote attacker to conduct a cross-site scripting XSS...
CVE-2023-37298
Joplin prior to 2.11.5 contains a cross-site scripting (XSS) vulnerability via a USE element in an SVG document. Affected product is Joplin (note‑taking app); impact is XSS in contexts that render SVG USE elements. The issue’s root cause is exposure of unsafe SVG usage, with remediation to upgrad...