RHCOS 4 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0777 advisory. - google-oauth-client: missing PKCE support in accordance with the RFC for OAuth 2.0 for Native Apps can lead to improper...

Cross-site Scripting in beetl-bbs

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-0776

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms 2.0. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation with the input leads to cross site scripting. The attack may be launched remotely. The exploit ha...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms 2.0. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation with the input leads to cross site scripting. The attack may be launched remotely. The exploit ha...

CVE-2024-0776

CVE-2024-0776 affects LinZhaoguan pb-cms 2.0, specifically the Comment Handler component. A cross-site scripting vulnerability is triggered by manipulating input, e.g. , with remote exploitation reportedly possible and the exploit disclosed publicly. Multiple connected sources corroborate the iss...

CBL Mariner 2.0 Security Update: postfix (CVE-2023-51764)

The version of postfix installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-51764 advisory. - Postfix through 3.8.5 allows SMTP smuggling unless configured with...

CBL Mariner 2.0 Security Update: reaper (CVE-2023-26159)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-26159 advisory. - Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to th...

SUSE: Security Advisory (SUSE-SU-2024:0137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-0693

CVE-2024-0693 affects EFS Easy File Sharing FTP 2.0. The vulnerability arises from manipulation of the username argument, causing a remote denial of service. Multiple sources corroborate remote exploitability and public disclosure. The provided documents do not specify a vendor fix or patched ver...

CVE-2024-0693 EFS Easy File Sharing FTP denial of service

A vulnerability classified as problematic was found in EFS Easy File Sharing FTP 2.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public...

CVE-2021-4433

Karjasoft Sami HTTP Server 2.0 is affected in the HTTP HEAD Request Handler component. The vulnerability (CVE-2021-4433) arises from manipulation of this handler, leading to remote denial of service. Exploitation has been disclosed publicly. Remediation suggestions from PT Security indicate disab...

EFS Software Easy File Sharing (EFS) Web Server Security Vulnerability

Efs Software EFS Software Easy File Sharing EFS Web Server is a suite of file sharing software from the Dutch company Efs Software. The software includes a forum site, file uploading, downloading, sharing and image sharing. A security vulnerability exists in EFS Software Easy File Sharing EFS Web...

Fedora: Security Advisory (FEDORA-2023-9a74d212f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Karjasoft Sami HTTP Server Security Vulnerability

Karjasoft Sami HTTP Server is an easy-to-configure web server from Karjasoft. A security vulnerability exists in Karjasoft Sami HTTP Server version 2.0. An attacker could exploit this vulnerability to cause a denial of service on the system...

GHSA-32Q4-86G8-6637 Stored Cross Site Scripting in beetl-bbs

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

Stored Cross Site Scripting in beetl-bbs

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

PT-2024-19448 · Beetl-Bbs · Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: beetl-bbs version 2.0 Description: A Stored Cross Site Scripting XSS vulnerability allows attackers to run arbitrary code via the "post/save" content parameter. This issue enables attackers to execute code on the affected system...