20 matches found
[SECURITY] [DLA 4576-1] p7zip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4576-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 11, 2026 https://wiki.debian.org/LTS -...
CVE-2024-31102
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue affects Prenotazioni: from n/a through 1.7.4...
CVE-2025-31102
creationtimestamp| type| source ---|---|--- 2025-03-28 10:28:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9312 2025-03-28 13:33:55+00:00| seen| https://t.me/cvedetector/21398...
CVE-2025-31102
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...
CVE-2025-31102 WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...
CVE-2025-31102
CVE-2025-31102 affects the WordPress plugin Hostel (versions up to 1.1.5.5). It is a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. The impact is reflected script execution in a victim’s browser when a crafted URL is visited. Remed...
Linux Distros Unpatched Vulnerability : CVE-2023-31102
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. CVE-2023-31102 Note that Nessus relies on the...
CVE-2024-31102
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue affects Prenotazioni: from n/a through 1.7.4...
CVE-2024-31102 WordPress Prenotazioni plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue affects Prenotazioni: from n/a through 1.7.4...
CVE-2024-31102
CVE-2024-31102 is an input‑sanitization issue in the WordPress plugin Prenotazioni (by Scimone Ignazio) that allows Stored XSS via improper neutralization of input during web page generation. Affected range: Prenotazioni versions up to 1.7.4 (no details on fixed versions provided). Impact per the...
CVE-2024-31102 WordPress Prenotazioni plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue affects Prenotazioni: from n/a through 1.7.4...
CVE-2023-31102
creationtimestamp| type| source ---|---|--- 2023-11-03 06:23:01+00:00| seen| https://t.me/cibsecurity/73491 2023-11-03 19:05:01+00:00| published-proof-of-concept| Telegram/apyBcUc7WhsZEJNg7HMbIG5RWswdhpfEnw-xnTdxfTtnJA 2023-11-03 20:05:09+00:00| published-proof-of-concept|...
CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
CVE-2023-31102
CVE-2023-31102 affects 7-Zip pre-23.00, describing an integer underflow and invalid read in Ppmd7.c triggered by crafted 7Z archives. The connected sources corroborate the vulnerability in 7-Zip up to version 23.00 and reference related advisories; no explicit exploit details are provided. Public...
CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
CVE-2022-31102 Cross-site Scripting for Argo CD single sign on users
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a cross-site scripting XSS bug which could allow an attacker to inject arbitrary JavaScript in the /auth/callback page in a victim's browser. This...
CVE-2022-31102
Argo CD (GitOps for Kubernetes) is affected by a cross-site scripting (XSS) vulnerability in versions 2.3.0–2.3.6 and 2.4.0–2.4.4 that allows arbitrary JavaScript in the /auth/callback page when SSO is enabled. Exploitation requires access to the API server’s encryption key, a method to inject a ...