203 matches found
CVE-2022-31065 Cross site scripting vulnerability for private chat in bigbluebutton
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker whose username contains malicious JavaScript, the script gets...
CVE-2022-31065 Cross site scripting vulnerability for private chat in bigbluebutton
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker whose username contains malicious JavaScript, the script gets...
BigBlueButton 跨站脚本漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community.A cross-site scripting vulnerability exists in versions prior to BigBlueButton 2.4.8 and prior to 2.5.0, which stems from users in private chat-enabled meetings being vulnerable to malicious JavaScript attack...
CVE-2022-25313 affecting package expat for versions less than 2.4.8-1
CVE-2022-25313 affecting package expat for versions less than 2.4.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-25315 affecting package expat for versions less than 2.4.8-1
CVE-2022-25315 affecting package expat for versions less than 2.4.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-25235 affecting package expat for versions less than 2.4.8-1
CVE-2022-25235 affecting package expat for versions less than 2.4.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-23852 affecting package expat for versions less than 2.4.8-1
CVE-2022-23852 affecting package expat for versions less than 2.4.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-25236 affecting package expat for versions less than 2.4.8-1
CVE-2022-25236 affecting package expat for versions less than 2.4.8-1. An upgraded version of the package is available that resolves this issue...
PKP Vendor Open Journal System 跨站脚本漏洞
PKP Vendor Open Journal System is an open journal system organized by PKP. It is used to manage and publish academic journals. A cross-site scripting vulnerability exists in PKP Vendor Open Journal System versions v2.4.8 through v3.3.8, which can be exploited by an attacker via a specially crafte...
AZL-8625 CVE-2022-25315 affecting package expat for versions less than 2.4.8-1
In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames...
AZL-8604 CVE-2022-25236 affecting package expat for versions less than 2.4.8-1
xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...
CVE-2021-24965
The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtbwelcomesetschedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform...
AZL-7835 CVE-2022-23852 affecting package expat for versions less than 2.4.8-1
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
WordPress Five Star Restaurant Reservations plugin <= 2.4.7 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Five Star Restaurant Reservations plugin versions = 2.4.7. Solution Update the WordPress Five Star Restaurant Reservations plugin to the latest available version at least 2.4.8...
CVE-2021-24924
The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue...
WordPress Email Log plugin <= 2.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by JrXnm in WordPress Email Log plugin versions = 2.4.7. Solution Update the WordPress Email Log plugin to the latest available version at least 2.4.8...
PPP: Buffer overflow
Background PPP is a Unix implementation of the Point-to-Point Protocol. Description It was discovered that bounds check in PPP for the rhostname was improperly constructed in the EAP request and response functions. Impact A remote attacker, by sending specially crafted authentication data, could...
SpotFTP-FTP Password Recover 2.4.8 - Denial of Service Exploit
Exploit Title: SpotFTP-FTP Password Recover 2.4.8 - Denial of Service PoC Exploit Author: Ismael Nava Vendor Homepage: http://www.nsauditor.com/ Software Link: http://www.nsauditor.com/spotftp.html Version: 2.4.8 Tested on: Windows 10 Home x64 CVE : n/a STEPS Open the program SpotFTP-FTP Password...
