CVE-2023-40277

creationtimestamp| type| source ---|---|--- 2024-03-19 02:26:24+00:00| seen| https://t.me/ctinow/211107 2024-03-19 02:26:30+00:00| seen| https://t.me/ctinow/211113...

CVE-2023-40277

OpenClinic GA 5.247.01 contains a reflected XSS in the login.jsp message parameter. The vulnerability affects the login flow and is documented with CVSSv3.1 base score 6.1 (MEDIUM) with Network attack vector, low attack complexity, no privileges, user interaction required, and changed scope (C/L/...

CVE-2022-40277

creationtimestamp| type| source ---|---|--- 2022-09-30 20:36:23+00:00| seen| https://t.me/cibsecurity/50784 2025-05-20 18:42:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17043...

CVE-2022-40277

CVE-2022-40277 affects Joplin (version 2.8.8). The vulnerability arises from improper validation of link schemas/protocols in markdown files before passing them to shell.openExternal, enabling an external attacker to execute arbitrary commands remotely when a user opens a malicious markdown link....