12 matches found
EUVD-2022-27441
Malicious code in bioql PyPI...
CVE-2022-27441
A stored cross-site scripting XSS vulnerability in TPCMS v3.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Phone text box...
CVE-2025-27441
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...
CVE-2025-27441
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...
CVE-2025-27441
creationtimestamp| type| source ---|---|--- 2025-04-08 11:28:40+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lmcenrnrjk2f 2025-04-08 16:46:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10950 2025-04-08 19:51:27+00:00| seen| https://t.me/cvedetector/22479 2025-04-12...
CVE-2024-27441
creationtimestamp| type| source ---|---|--- 2024-03-13 16:27:20+00:00| seen| https://t.me/ctinow/206866...
CVE-2023-27441
Cross-Site Request Forgery CSRF vulnerability in glSPICE New Adman plugin = 1.6.8 versions...
CVE-2023-27441
CVE-2023-27441 — WordPress New Adman Plugin
TPCMS Cross-Site Scripting Vulnerability (CVE-2022-27441)
TPCMS is a content management system.A cross-site scripting vulnerability exists in TPCMS version 3.2, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute arbitrary web script or HTML by injecting a...
CVE-2022-27441
creationtimestamp| type| source ---|---|--- 2022-04-05 00:28:14+00:00| seen| https://t.me/cibsecurity/40133...
CVE-2022-27441
TPCMS v3.2 is affected by a stored XSS vulnerability. The issue arises from lack of proper validation of client-side data, allowing attackers to inject crafted payloads via the Phone text box to execute arbitrary web scripts/HTML. The CVE-2022-27441 description consistently states this is a store...
CVE-2022-27441
A stored cross-site scripting XSS vulnerability in TPCMS v3.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Phone text box...