363 matches found
Exploit for CVE-2021-26700
CVE-2021-26700 Note: this manual is valid for DSNS lab's...
CVE-2022-40606
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...
Design/Logic Flaw
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
Cross site scripting
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
Design/Logic Flaw
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
PT-2022-25670 · Mitre · Mitre Caldera
Name of the Vulnerable Software and Affected Versions: MITRE CALDERA version 4.1.0 Description: The issue allows stored XSS via the app.contact.gist field, also known as the gist contact configuration field, leading to the execution of arbitrary commands on agents. Recommendations: For MITRE...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CALDERA 跨站脚本漏洞
CALDERA is an open source cybersecurity platform from The MITRE Corporation. Designed to easily automate adversary emulation, assist with manual red teaming, and automate incident response. A security vulnerability exists in CALDERA version 4.1.0. An attacker exploited the vulnerability to execut...
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
CALDERA 跨站脚本漏洞
CALDERA is an open source cybersecurity platform from The MITRE Corporation. Designed to easily automate adversary emulation, assist with manual red teaming, and automate incident response. A security vulnerability exists in CALDERA versions prior to 4.1.0. An attacker exploited the vulnerability...
CALDERA 跨站脚本漏洞
CALDERA is an open source cybersecurity platform from The MITRE Corporation. Designed to easily automate adversary emulation, assist with manual red teaming, and automate incident response. A security vulnerability exists in CALDERA versions prior to 4.1.0. An attacker exploited the vulnerability...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CVE-2022-40606
CVE-2022-40606 affects MITRE CALDERA prior to 4.1.0. The vulnerability is an XSS in the Operations tab and/or Debrief plugin triggered by a crafted operation name. The connected documents corroborate the same description and reference Caldera 4.1.0 release, but do not provide explicit remediation...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CVE-2022-40605
CVE-2022-40605 (MITRE CALDERA) affects MITRE CALDERA before 4.1.0, with an XSS exposure in the Operations tab and/or Debrief plugin triggered by a crafted operation name. The description indicates a separate vulnerability from CVE-2022-40606. The connected sources reiterate the same issue and not...