2805 matches found
Ubuntu: Security Advisory (USN-6060-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
Sql injection
SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...
Companymaps 跨站脚本漏洞
Companymaps is a display of a company map containing all desks and employees by Maximilian Vogt Personal Developer. A security vulnerability exists in Companymaps version 8.0, which stems from the presence of a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary code...
CVE-2023-29808
Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
CVE-2023-29983
CVE-2023-29983 affects Maximilian Vogt cmaps v8.0. The Red Hat/NVD/OSV/Exploits docs describe a Cross-Site Scripting (stored XSS) vulnerability that can be triggered via the auditlog tab in the admin panel, allowing a remote attacker to execute arbitrary code. Exploitation details show an attacke...
PT-2023-22502 · Maximilian Vogt · Cmaps
Name of the Vulnerable Software and Affected Versions: Maximilian Vogt cmaps version 8.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Recommendations: For version 8.0, update to a newer version that contains ...
PT-2023-22427 · Maximilian Vogt · Companymaps
Name of the Vulnerable Software and Affected Versions: Maximilian Vogt companymaps cmaps version 8.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via a crafted script in the request. This enables the attacker to potentially access or manipulate sensitive...
Security Bulletin: IBM MQ is vulnerable to a denial of service attack (CVE-2023-26285)
Summary IBM MQ is vulnerable to a denial of service attack caused by an error processing invalid data from a compromised client. Vulnerability Details CVEID:CVE-2023-26285 DESCRIPTION: IBM MQ could allow a remote attacker to cause a denial of service due to an error processing invalid data. CVSS...
Design/Logic Flaw
AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request...
USN-6060-1: MySQL vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.33 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.42. In addition to...
Companymaps 8.0 Cross Site Scripting Vulnerability
Exploit Title: Reflected Cross Site Scripting - Exploit Author: Lucas Noki 0xPrototype - Vendor Homepage: https://github.com/vogtmh - Software Link: https://github.com/vogtmh/cmaps - Version: 8.0 - Tested on: Mac, Windows, Linux - CVE : CVE-2023-29808 Description: The vulnerability found is...
Companymaps 8.0 SQL Injection Vulnerability
Exploit Title: Unauthenticated SQL injection - Exploit Author: Lucas Noki 0xPrototype - Vendor Homepage: https://github.com/vogtmh - Software Link: https://github.com/vogtmh/cmaps - Version: 8.0 - Tested on: Mac, Windows, Linux - CVE : CVE-2023-29809 Description: The vulnerability found is an SQL...
Companymaps v8.0 - Stored Cross Site Scripting Vulnerability
Exploit Title: Companymaps V8.0 - Stored Cross Site Scripting XSS Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29983 Steps to reproduce: 1. Clone the...
K000133753: PHP vulnerability CVE-2023-0662
Security Advisory Description In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU...
Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator may be vulnerable to denial of service due to [CVE-2022-41725]
Summary IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Golang Go. CVE-2022-41725 Vulnerability Details CVEID:CVE-2022-41725 DESCRIPTION: Golang Go is...
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to [CVE-2022-38900]
Summary Node.js module decode-uri-component is part of the Node.js runtime used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service. This bulletin provides patch information to address the reported...
PaperCut NG/MG 22.0.4 - Authentication Bypass Exploit
Exploit Title: PaperCut NG/MG 22.0.4 - Authentication Bypass Exploit Author: MaanVader Vendor Homepage: https://www.papercut.com/ Version: 8.0 or later Tested on: 22.0.4 CVE: CVE-2023-27350 import requests from bs4 import BeautifulSoup import re def vulnversion: ip = input"Enter the ip address: "...
PaperCut NG/MG 22.0.4 - Authentication Bypass
Exploit Title: PaperCut NG/MG 22.0.4 - Authentication Bypass Date: 21 April 2023 Exploit Author: MaanVader Vendor Homepage: https://www.papercut.com/ Version: 8.0 or later Tested on: 22.0.4 CVE: CVE-2023-27350 import requests from bs4 import BeautifulSoup import re def vulnversion: ip = input"Ent...