22 matches found
EUVD-2023-30758
Malicious code in bioql PyPI...
EUVD-2024-16486
Malicious code in bioql PyPI...
CVE-2024-0696
A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. This affects an unknown part of the file /ProductSerie/view/ of the component Product Series Overview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
CVE-2024-0696
A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. This affects an unknown part of the file /ProductSerie/view/ of the component Product Series Overview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...
Cross site scripting
A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. This affects an unknown part of the file /ProductSerie/view/ of the component Product Series Overview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2024-0696 AtroCore AtroPIM Product Series Overview cross site scripting
A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. This affects an unknown part of the file /ProductSerie/view/ of the component Product Series Overview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2024-0696 AtroCore AtroPIM Product Series Overview cross site scripting
A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. This affects an unknown part of the file /ProductSerie/view/ of the component Product Series Overview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2024-0696
CVE-2024-0696 affects AtroCore AtroPIM 1.8.4. Vulnerable component: the file path corresponding to the Product Series Overview, specifically the endpoint "/#/ProductSerie/view/". Root cause: cross-site scripting (XSS) vulnerability in that view. Impact: remote attacker could exploit XSS; exploita...
PT-2024-15757 · Atrocore · Atropim
Name of the Vulnerable Software and Affected Versions: AtroCore AtroPIM version 1.8.4 Description: A vulnerability was found in AtroCore AtroPIM, affecting an unknown part of the file /ProductSerie/view/ of the component Product Series Overview. The manipulation leads to cross site scripting. It ...
atrocore 1.5.25 User interaction - Unauthenticated File upload Vulnerability
Exploit Title: atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE Author: nu11secur1ty Vendor: https://atropim.com/ Software: https://github.com/atrocore/atrocore/releases/tag/1.5.25 Reference: https://portswigger.net/web-security/file-upload Description: The Create Import Feed...
atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE
Exploit Title: atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE Author: nu11secur1ty Date: 02.16.2023 Vendor: https://atropim.com/ Software: https://github.com/atrocore/atrocore/releases/tag/1.5.25 Reference: https://portswigger.net/web-security/file-upload Description: The...
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
Unrestricted file upload
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
CVE-2023-26968
CVE-2023-26968 affects Atrocore 1.5.25: the Create Import Feed option with the glyphicon-glyphicon-paperclip function is vulnerable to unauthenticated file upload. CVSS v3.1 shows/quotes a Critical rating (9.8) with Network access, no privileges, no user interaction required, and high impact to c...
AtroCore 代码问题漏洞
AtroCore is an open source data platform, data management and middleware software from AtroCore, Inc. A security vulnerability exists in AtroCore version 1.5.25 that stems from the presence of an unauthenticated file upload vulnerability...
PT-2023-20879 · Atrocore · Atrocore
Name of the Vulnerable Software and Affected Versions: Atrocore version 1.5.25 Description: The Create Import Feed option with the glyphicon-glyphicon-paperclip function in Atrocore is vulnerable to unauthenticated file upload. This issue allows unauthorized users to upload files without proper...
