CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

DEBIAN-CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

Cross site scripting

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

Laravel Framework encryption vulnerabilities

Laravel Framework is a PHP-based web application development framework by Taylor Otwell, a personal developer.Laravel Framework has a cross-site scripting vulnerability that can be exploited by attackers to perform xss attacks through the Blade template engine...

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

CVE-2021-43808 Blade `@parent` Exploitation Leading To Possible XSS in Laravel

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

PT-2021-23949 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 8.75.0, 7.30.6, and 6.20.42 Description: The issue is related to a possible cross-site scripting XSS vulnerability in the Blade templating engine. This vulnerability can be exposed if the parent template contains an...

CVE-2021-43808: Improper Neutralization of Input During Web Page Generation

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

Snipe-IT Cross-Site Request Forgery Vulnerability

Snipe-IT is an open source IT asset/license management system. Snipe-IT is vulnerable to cross-site request forgery, which stems from a lack of csrf checksum for POST requests in the software's view.blade.php file, and can be exploited by attackers to launch cross-site request forgery attacks...

HPESBHF04143 rev.2 - HPE Integrated Lights-Out 4 (iLO 4) for Moonshot, Edgeline Cartridges and Blades, HPE Moonshot Chassis Management firmware, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to version 2.64 for Moonshot/Edgeline HPE ProLiant m710x Server...

ZTE Blade Vantage Z839 Emode.APK android.uid.system Privilege Escalation

ZTE Blade Vantage Z839 Emode.APK android.uid.system LPE exploit =============================================================== ZTE Blade Vantage Z839 Android handsets running 7.1.1 contain an engineering mode that utilizes "Android Secret Codes" for accessing hidden engineering functionality. Su...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +73 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (8.1.15.v20140411)

org.eclipse.jetty:jetty-webapp MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

WS-2020-0413

In Jarboe package for Laravel Web Framework, versions 1.0.0 through 1.6.0 are vulnerable to Cross-Site Scripting XSS, due to use of unescaped Blade template engine statements, instead of regular escaped ones. An attacker could inject arbitrary javascript code through Markdown or WYSIWYG input...

IBM BladeCenter Cross-Site Request Forgery Vulnerability

IBM Blade Center is an IBM server management program. IBM Blade Center suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to construct a malicious URI, bait a request, and can be used to perform a malicious operation in the context of the target use...

CVE-2020-16165

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

CVE-2020-16165: Improper Neutralization of Special Elements used in an SQL Command

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

CVE-2020-7131

This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...