CVE-2023-33732

Cross Site Scripting XSS in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval...

CVE-2023-33732

creationtimestamp| type| source ---|---|--- 2023-06-01 01:28:07+00:00| seen| https://t.me/cibsecurity/64837 2026-07-29 12:00:27+00:00| seen| https://t.me/CVEhub/14110 2026-07-30 00:00:49+00:00| seen| https://t.me/CVEhub/14110 2026-07-31 00:00:25+00:00| published-proof-of-concept|...

CVE-2023-33732

CVE-2023-33733 concerns the Python ReportLab library. A sandbox bypass in ReportLab could allow arbitrary code execution when processing crafted PDFs. Public advisories (e.g., Debian DSA-5791/DLA-3917) state that vulnerable versions up to 3.6.12-1+deb12u1 (and earlier 3.5.59-2+deb11u1 in Debian 1...

CVE-2023-33732

Cross Site Scripting XSS in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval...