20 matches found
CVE-2026-11404
creationtimestamp| type| source ---|---|--- 2026-07-09 16:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zyixrry2e 2026-07-11 00:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdftvzixw2e...
CVE-2019-11404
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts for compiling and building the published JARs over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack...
CVE-2024-11404
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...
CVE-2017-11404
In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php...
CVE-2024-11404
creationtimestamp| type| source ---|---|--- 2024-11-20 13:44:40+00:00| seen| https://t.me/cvedetector/11600...
danceschool-dancervax (>=0.1.1 <=0.1.5), django-danceschool (>=0.9.1 <=0.9.3) +5 more potentially affected by CVE-2024-11404 via django-filer (=3.0.3)
django-filer PYPI version =3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - danceschool-dancervax =0.1.1, =0.9.1, =0.2.0.0, =1.16.0, =2.7.1 Source cves: CVE-2024-11404 Source advisory:...
aldryn-events (>=1.1.1 <=2.0.0), aldryn-forms (>=3.0.4 <=3.0.5) +38 more potentially affected by CVE-2024-11404 via django-filer (>=0.9.9 <=3.0.3)
django-filer PYPI version =0.9.9, =1.1.1, =3.0.4, =1.1.1, =0.2.0, =0.1.1, =0.1.1, =1.4.3, =0.1.0, =0.6.2, =0.0.1, =0.1.0, =0.3.1 - django-imagedeck =0.3.3 and more Source cves: CVE-2024-11404 Source advisory: OSV:GHSA-J4V3-WWWX-5GQV...
CVE-2024-11404 File Upload Bypass in django Filer
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...
CVE-2024-11404 File Upload Bypass in django Filer
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...
CVE-2024-11404
CVE-2024-11404 : Affected software is Django Filer (used with Django CMS). The vulnerability is an Unrestricted Upload of File with Dangerous Type and Stored XSS caused by input data manipulation and improper neutralization of script-related HTML tags. Impact is stored XSS with potential data han...
CVE-2020-11404
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2019-11404
Summary: CVE-2019-11404 affects arrow-kt Arrow before 0.9.0, where Gradle build artifacts for publishing the JARs were resolved over HTTP instead of HTTPS. This creates a risk that dependent artifacts could be maliciously modified via MITM during download. What is affected: The Arrow Kotlin libra...
CVE-2019-11404
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts for compiling and building the published JARs over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack...
DomainMod 4.09.03 - sslpaid Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter Exploit Author: longer（email protected） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...
DomainMod 4.09.03 Cross Site Scripting
Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Date: 2018-05-28 Exploit Author: longeri1/[email protected]/4 Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod https://github.com/domainmod/domainmod Version:...
DomainMod 4.09.03 - sslpaid Cross-Site Scripting
DomainMod 4.09.03 - sslpaid Cross-Site Scripting Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter Date: 2018-05-28 Exploit Author: longer（[email protected]） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link:...
DomainMod 4.09.03 - 'sslpaid' Cross-Site Scripting
Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter Date: 2018-05-28 Exploit Author: longer（[email protected]） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod https://github.com/domainmod/domainmod...
CVE-2018-11404
CVE-2018-11404 affects DomainMod on version 4.09.03. The vulnerability is an XSS in the assets/edit/ssl-provider-account.php page via the sslpaid parameter, enabling injection of arbitrary script after login. Root cause: unsanitized input on the sslpaid parameter leading to reflected/stored/scrip...
CVE-2017-11404
CMS Made Simple (CMSMS) 2.2.2 is affected by a vulnerability where remote authenticated administrators can upload a .php file through a FileManager action to admin/moduleinterface.php. The issue is documented across multiple feeds (NVD and others) with an attack surface requiring authentication, ...