42 matches found
CVE-2025-29489
libming v0.4.8 was discovered to contain a memory leak via the parseSWFMORPHLINESTYLES function...
CVE-2025-29489
libming v0.4.8 was discovered to contain a memory leak via the parseSWFMORPHLINESTYLES function...
Exploit for Cross-site Scripting in Cpanel
CVE-2023-29489 exploit This script can exploit many web...
CVE-2024-29489
Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...
UBUNTU-CVE-2024-29489
Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...
CVE-2024-29489
Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...
CVE-2024-29489
CVE-2024-29489 affects JerryScript 2.4.0, with a segmentation fault in ecma_get_object_type (jerry-core/ecma/base/ecma-helpers.c:238:58). The description and connected documents confirm the vulnerable component/function but do not provide public details on exploitation, affected products beyond J...
CVE-2024-29489
Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...
Exploit for Cross-site Scripting in Cpanel
CVE-2023-29489 -...
Exploit for Cross-site Scripting in Cpanel
!logohttps://raw.githubusercontent.com/mr-sami-x/XSS1915/mai...
Exploit for Cross-site Scripting in Cpanel
POC for cP...
CVE-2023-29489
creationtimestamp| type| source ---|---|--- 2023-04-27 03:37:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4255 2023-04-27 12:27:02+00:00| seen| https://t.me/thebugbountyhunter/7276 2023-04-27 23:26:01+00:00| published-proof-of-concept| https://t.me/turkhckteam/77 2023-04-28...
CVE-2023-29489
CVE-2023-29489 affects cPanel before 11.109.9999.116, with XSS on the cpsrvd error page triggered by an invalid webcall ID (SEC-669). Impact is browser-execution of malicious scripts, as described, with the vulnerability graded as MEDIUM (CVSS v3.1). Affected fixed versions are 11.109.9999.116, 1...
CVE-2023-29489
An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...
CVE-2022-29489
Cross-Site Request Forgery CSRF vulnerability in Sucuri Security plugin = 1.8.33 at WordPress leading to Event log entry creation...
CVE-2022-29489
CVE-2022-29489 describes a CSRF vulnerability in the WordPress Sucuri Security plugin (versions
Security Bulletin: Multiple vulnerabilities in Jquery-Ui, highcharts, and datatables are affecting QRadar User Behavior Analytics (CVE-2021-41182, CVE-2021-41183, CVE-2021-41184, CVE-2021-23445, CVE-2021-29489)
Summary There are vulnerabilities in third party packages JQuery-UI, Highcharts, datatables.net affecting User Behavior AnayticsUBA. UBA has been updated to the latest versions of these packages to address these vulnerabilities. Vulnerability Details CVEID:CVE-2021-41182 DESCRIPTION: jQuery...
Cross-Site Scripting
Overview Impact In highcharts versions 8 and earlier, the chart options structure was not systematically filtered for XSS vectors. The potential impact was that content from untrusted sources could execute code in the end user's browser. Especially when using the useHTML flag, HTML string options...
CVE-2021-29489 Options structure open to XSS if passed unfiltered
Highcharts JS is a JavaScript charting library based on SVG. In Highcharts versions 8 and earlier, the chart options structure was not systematically filtered for XSS vectors. The potential impact was that content from untrusted sources could execute code in the end user's browser. The...
CVE-2021-29489
Highcharts JS (charting library) versions 8 and earlier are vulnerable to cross-site scripting due to inadequate filtering of the chart options structure for XSS vectors. The vulnerability can allow execution of untrusted script in the end user’s browser if the configuration contains malicious in...