CVE-2024-36624

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...

CVE-2024-36624

creationtimestamp| type| source ---|---|--- 2024-11-29 17:30:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113567428696686882...

CVE-2024-36624

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...

CVE-2023-36624

creationtimestamp| type| source ---|---|--- 2023-07-06 00:27:09+00:00| seen| https://t.me/cibsecurity/66013...

CVE-2023-36624

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement...

CVE-2023-36624

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement...

CVE-2023-36624

Summary: CVE-2023-36624 affects Loxone Miniserver Go Gen.2 up to 14.0.3.28. An authenticated operating system user can escalate privileges via the Sudo configuration, allowing elevated execution of binaries without a password. What’s known from documents: Multiple sources (NVD/Red Hat/CVE listing...

CVE-2020-36624

creationtimestamp| type| source ---|---|--- 2022-12-22 12:23:28+00:00| seen| https://t.me/cibsecurity/55108...

CVE-2020-36624

Affected software/component: ahorner text-helpers (up to 1.0.x; patch lines reference 1.1.x) with vulnerable code in lib/text_helpers/translation.rb. Root cause: manipulation of the link argument leads to use of a web link to an untrusted target with window.opener access (reverse tabnabbing style...

CVE-2020-36624 ahorner text-helpers translation.rb reverse tabnabbing

A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/texthelpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The...

CVE-2021-36624

creationtimestamp| type| source ---|---|--- 2021-07-30 18:21:28+00:00| seen| https://t.me/cibsecurity/26616...

CVE-2021-36624

The CVE describes a remote SQL injection in Sourcecodester Phone Shop Sales Managements System v1.0 that enables authentication bypass. Affected component: the PHP-based login/authentication logic; root cause: SQL injection in authentication flow. Impact per sources ranges to partial/full confide...