PT-2021-23644

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 2.9.1 Description A Cross Site Scripting XSS issue exists in the node input box in Custom Templates. This allows for potential exploitation. Recommendations For versions prior to 2.9.1, update to version 2.9.1 or...

Portainer cross-site scripting vulnerabilities

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in the node input box in custom templates prior to Portainer version 2.9.1...

PT-2021-27860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr base16 decode nstd, fr value box from str, and...

CVE-2021-39349

The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /includes/admin/class-author-bio-box-admin.php file which allowed attackers with administrative user access to inject arbitrar...

CVE-2021-39349

The CVE describes a Stored Cross-Site Scripting vulnerability in the WordPress Author Bio Box plugin (affected versions up to 3.3.1; PatchStack notes up to 3.4.0). The root cause is insufficient input validation and sanitization across several parameters in includes/admin/class-author-bio-box-adm...

PT-2021-22555

Name of the Vulnerable Software and Affected Versions: Author Bio Box WordPress plugin versions up to and including 3.3.1 HAL WordPress plugin versions up to and including 2.1.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input validation and sanitization...

i-Panel Administration System 2.0 Cross Site Scripting

Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting XSS Date: 04.10.2021 Exploit Author: Forster Chiu Vendor Homepage: https://www.hkurl.com Version: 2.0 Tested on: Chrome, Edge and Firefox CVE: CVE-2021-41878 Reference:...

CVE-2021-39349: Improper Neutralization of Input During Web Page Generation

The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /includes/admin/class-author-bio-box-admin.php file which allowed attackers with administrative user access to inject arbitrar...

i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)

Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting XSS Date: 04.10.2021 Exploit Author: Forster Chiu Vendor Homepage: https://www.hkurl.com Version: 2.0 Tested on: Chrome, Edge and Firefox CVE: CVE-2021-41878 Reference:...

i-Panel Administration System 2.0 - Reflected Cross-site Scripting Vulnerability

Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting XSS Exploit Author: Forster Chiu Vendor Homepage: https://www.hkurl.com Version: 2.0 Tested on: Chrome, Edge and Firefox CVE: CVE-2021-41878 Reference: https://cybergroot.com/cvesubmission/2021-1/XSSi-Panel2.0.html ...

PT-2021-10779

Name of the Vulnerable Software and Affected Versions gpac version 0.8.0 Description An issue was discovered in the dump data hex function in box dump.c, which has a heap-based buffer overflow. This can lead to a denial of service DOS via a crafted input. Recommendations For gpac version 0.8.0,...

PT-2021-27842

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves several functions, including fr base16 decode nstd, fr value bo...

PT-2021-27841

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions fr dns label to value box, decode value...

Vulnerabilities fixed in IBM FileNet Content manager

IBM has fixed two vulnerabilities in the PDFBox module in the FileNet Content Manager. An unauthenticated malicious person at remote can exploit the vulnerabilities to cause a denial-of-service by tricking a victim into processing a rogue PDF file or have it processed. IBM has released updates to...

CVE-2021-28547

Adobe Creative Cloud Desktop Application for macOS version 5.3 and earlier is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any directory under the administrator authority...

PortlandLabs Concrete CMS Cross-Site Request Forgery Vulnerability (CNVD-2021-76080)

PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A cross-site request forgery vulnerability exists in PortlandLabs Concrete CMS, which stems from a failure to validate CCM tokens when adding a save endpoint to the product's...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due a NULL pointer dereference in the function vwidboxdel located in boxcodebase.c...

PT-2021-30864

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A security issue exists in certain resize operations when using the '--resize-method=box' option. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2021-39591

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfGetShapeBoundingBox located in swfshape.c. It allows an attacker to cause Denial of Service...

DEBIAN-CVE-2021-32270

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...