14106 matches found
PT-2024-36219 · Zebrasoft · Zebrasoft Monaco Immotoolbox Connect
Name of the Vulnerable Software and Affected Versions: ZebraSoft Monaco ImmoToolBox Connect versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attack...
WordPress plugin ImmoToolBox Connect 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2024-48908)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe Connect, which can be exploited by an attacker to inject malicious script into vulnerable form fields...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-02098)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe Connect version 12.6 and earlier and version 11.4.7 and earlier, which can be exploited by an attacker to inject malicious script into...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-01834)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect that can be exploited by an attacker to inject malicious scripts into vulnerable form fields...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-02842)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect that can be exploited by an attacker to inject malicious scripts into vulnerable form fields...
Adobe Connect Input Validation Error Vulnerability (CNVD-2025-01839)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect has a security vulnerability that can be exploited by an attacker to cause a security feature bypass...
Pulse Connect Secure < 22.7R2.1 Denial of Service
The Pulse Connect Secure installed on the remote host is prior to 22.7R2.1. It is, therefore, affected by An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service. CVE-2024-37401 Note that Nessus has not...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-01835)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect that can be exploited by an attacker to inject malicious scripts into vulnerable form fields...
PT-2024-36228 · Unknown · Connect Contact Form 7 To Constant Contact
Name of the Vulnerable Software and Affected Versions: Connect Contact Form 7 to Constant Contact versions 1.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-02841)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect that can be exploited by an attacker to inject malicious scripts into vulnerable form fields...
Pulse Connect Secure < 22.7R2.4 multiple vulnerabilities
The Pulse Connect Secure installed on the remote host is prior to 22.7R2.4. It is, therefore, affected by multiple vulnerabilities. - Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-01838)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect that can be exploited by an attacker to inject malicious scripts into vulnerable form fields...
MAL-2025-961 Malicious code in python-bitget-connect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1797b7fdf9859888b5495817784ead0bdc01e6acad5ae410af1e1df89acbded6 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...
Malicious code in python-bitget-connect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1797b7fdf9859888b5495817784ead0bdc01e6acad5ae410af1e1df89acbded6 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...
SUSE CVE-2024-52801
sftpgo is a full-featured and highly configurable event-driven file transfer solution. Server protocols: SFTP, HTTP/S, FTP/S, WebDAV. The OpenID Connect implementation allows authenticated users to brute force session cookies and thereby gain access to other users' data, since the cookies are...
CVE-2024-37401
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-37401
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...