CVE-2019-25408 Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via netwizard2

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the netmaskaddr parameter. Attackers can send POST requests to the netwizard2 endpoint with script payloads in the netmaskaddr...

CVE-2022-25408

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...

CVE-2024-12753

CVE-2024-12753 concerns Foxit PDF Reader. Connected sources confirm a local privilege escalation via the installer: by creating a junction, an attacker can abuse the installer process to create an arbitrary file and escalate privileges to SYSTEM after gaining low-privilege code execution. Impact ...

CVE-2022-25408

creationtimestamp| type| source ---|---|--- 2022-03-01 02:29:00+00:00| seen| https://t.me/cibsecurity/38235...

CVE-2022-25408

The CVE-2022-25408 entry concerns Hospital Management System v1.0, with a stored XSS vulnerability exploitable via the dpassword parameter in /admin-panel1.php. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE list, CNNVD) and consistently describes client-side JavaScript ...

CVE-2021-25408

CVE-2021-25408 concerns a buffer overflow in the NPU driver prior to Samsung SMR JUN-2021 Release 1. The underlying issue is a memory overwrite vulnerability in the driver that could lead to arbitrary memory write and code execution. Affected product scope is the NPU driver as described; no speci...

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

ddfnetwork.com XSS vulnerability

Vulnerable URL: https://ddfnetwork.com/tour3/?xss=xss=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EGC1984.31.23.577.0.0.0.0.0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

visihow.com XSS vulnerability

Vulnerable URL: http://visihow.com/Special:LoginReminder?name=%22%3E%3Csvg/onload%3Dalert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25408 Google Pagerank| 0...