Cross site scripting

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fieldname parameter...

CVE-2023-37827

CVE-2023-37827 describes a cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V3.3. The issue allows an attacker to inject arbitrary web scripts or HTML via the executionBlockName parameter. Public details from the initial and connected records confir...

CVE-2023-37829

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.message parameter...

CVE-2023-37829

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.message parameter...

CVE-2023-37826

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fieldname parameter...

PT-2023-26131 · General Solutions Steiner Gmbh · Case 3 Taskmanagement

Name of the Vulnerable Software and Affected Versions: General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tasktyp parameter. Recommendation...

PT-2023-26134 · General Solutions Steiner Gmbh · Case 3 Taskmanagement

Name of the Vulnerable Software and Affected Versions: General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. This enables the...

CVE-2023-37826

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fieldname parameter...

CVE-2023-37829

CVE-2023-37829 describes a cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V3.3. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the notification.message parameter. Affects CASE 3 Taskmanage...

CVE-2023-37827

A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the executionBlockName parameter...

CVE-2023-37826

CVE-2023-37826 concerns General Solutions Steiner GmbH CASE 3 Taskmanagement, version 3.3. The connected documents consistently describe a cross-site scripting (XSS) vulnerability exploitable by injecting a crafted payload into the fieldname parameter, enabling execution of arbitrary web scripts ...

CVE-2023-37828

CVE-2023-37828 affects General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3. The connected documents confirm a cross-site scripting (XSS) vulnerability where a crafted payload injected into the Tasktyp parameter can cause arbitrary web scripts or HTML to execute. The root cause and ex...

CVE-2023-40187

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the avc420ensurebuffer and avc444ensurebuffer functions. If the value of piDstSizex is 0, ppYUVDstDatax will be...

CVE-2023-40187

FreeRDP CVE-2023-40187 is a Use-After-Free in the 3.x beta branch related to avc420_ensure_buffer/avc444_ensure_buffer. When piDstSize[x] == 0, ppYUVDstData[x] is freed without being updated, leading to a vulnerability. Remediation: upgrade to 3.0.0-beta3 or later. Other connected sources (e.g., ...

CVE-2023-41265

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

This Week in Spring - August 29th, 2023 - the post SpringOne recovery blog

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm exhausted. Seriously. Last week was mental. If you need me, I'll be over sipping on a tea... But, before that, there's a ton of things to cover from this last week, as always, and there's no rest for the curious, so let's...

Exploit for Classic Buffer Overflow in Raidenftpd

CVE-2023-39063 This repository contains an exploit for the vul...

Tuleap 安全漏洞

Tuleap is an open source application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability exists in Tuleap that stems from the presence of a privilege control error issue...

PT-2023-26993 · Unknown · Tuleap Community Edition +1

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 14.11.99.28 Tuleap Enterprise Edition versions prior to 14.10-6 Tuleap Enterprise Edition versions prior to 14.11-3 Description: The issue arises from content not being properly escaped in the "card...

IPv6 Local Scoped Address Disruption

opensmtpd is vulnerable to IPv6 Local Scoped Address Disruption . The vulnerability exists due to the use of inetpton3 function in the envelope.c, which allows an attacker to abort the connection by providing localy scoped IPv6 address...