22223 matches found
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
Cross site request forgery (csrf)
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-22229
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability, a stored XSS or persistent, in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance Formerly Netrounds allows a high-privilege attacker with 'WRITE' permissions to...
CVE-2022-22229 Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability, a stored XSS or persistent, in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance Formerly Netrounds allows a high-privilege attacker with 'WRITE' permissions to...
EyouCms 跨站请求伪造漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9, which stems from the discovery of multiple cross-site request forgery CSRF vulnerabilities vi...
CVE-2022-41500
CVE-2022-41500 affects EyouCMS V1.5.9 with multiple CSRF vulnerabilities exposed via the Members Center, Editorial Membership, and Points Recharge components. The CVE’s scoring (CVSS v3.1) is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required; impacts span...
PT-2022-25897 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities found in EyouCMS. These vulnerabilities are present in the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
Juniper Networks Paragon Active Assurance 跨站脚本漏洞
Juniper Networks Paragon Active Assurance is a programmable test and service assurance solution from Juniper Networks, Inc. Using software-based and traffic-generating test proxies, it can be easily used and delivered as a SaaS solution from the cloud or deployed locally in NFV environments. A...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Installation Download the Python scri...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Installation git clone https://github.com/CJ-0107/cve-20...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 ATLASIAN-Confluence RCE Installa...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
PoC exploit for CVE-2022-26134, a remote code execution vulnerab...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2022-26134, an OGNL injection vuln...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
It is an offensive tool for web exploitation. The repository is...
New “Prestige” ransomware impacts organizations in Ukraine and Poland
The Microsoft Threat Intelligence Center MSTIC has identified evidence of a novel ransomware campaign targeting organizations in the transportation and related logistics industries in Ukraine and Poland utilizing a previously unidentified ransomware payload. We observed this new ransomware, which...
centerformultisystemdisease.com Cross Site Scripting vulnerability OBB-2996040
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-42339
creationtimestamp| type| source ---|---|--- 2022-10-13 07:58:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus18/2022 2022-10-15 00:29:21+00:00| seen| https://t.me/cibsecurity/51512...
Critical severity command injection vulnerability - CVE-2022-43781
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to gain code execution on the system. This vulnerability was introduced in Bitbucket Server and Data Center...