CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 及更低版本存在开放重定向漏洞。 复现步骤 1. 登录你的账户，访问 https://mainnet.demo.btcpayserver.org/login 2. 然后点击以下链接 https://mainnet.demo.btcpayserver.org/recovery-seed-backup?cryptoCode=BTC&mnemonic=above&passphrase=&isStored=false&requireConfirm=true&returnUrl=//evil.com 3. 勾选...

EUVD-2021-27077

Malware in sbrugna...

EUVD-2021-26943

Malware in sbrugna...

EUVD-2023-12766

Malicious code in bioql PyPI...

EUVD-2023-12765

Malicious code in bioql PyPI...

EUVD-2023-0312

Malicious code in bioql PyPI...

EUVD-2023-23432

Malicious code in bioql PyPI...

EUVD-2023-12815

Malicious code in bioql PyPI...

EUVD-2023-23537

Malicious code in bioql PyPI...

EUVD-2023-12869

Malicious code in bioql PyPI...

CVE-2023-0493

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

CVE-2023-0747

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0810

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11...

CVE-2023-0748

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-1270

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1149

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...

CVE-2021-3830

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3646

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2023-1270

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1270

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...