CVE-2024-29193: Improper Neutralization of Input During Web Page Generation

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The index page index.html shows the available streams by fetching the API in the client side. Then, it uses Object.entries to iterate over the result whose first item name gets...

BIT-MLFLOW-2024-27132 Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over template variables...

Cross-site Scripting (XSS)

phpmyfaq/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to the inadequacy of PHP's FILTERVALIDATEEMAIL function, which only validates email format but not its content. This allows an attacker to execute arbitrary client-side JavaScript within the context of...

LimeSurvey Community 5.3.32 Cross Site Scripting

Exploit Title: Stored Cross-Site Scripting XSS in LimeSurvey Community Edition Version 5.3.32+220817 Exploit Author: Subhankar Singh Date: 2024-02-03 Vendor: LimeSurvey Software Link: https://community.limesurvey.org/releases/ Version: LimeSurvey Community Edition Version 5.3.32+220817 Tested on:...

phpMyFAQ stored Cross-site Scripting at user email

Summary The email field in phpMyFAQ's user control panel page is vulnerable to stored XSS attacks due to the inadequacy of PHP's FILTERVALIDATEEMAIL function, which only validates the email format, not its content. This vulnerability enables an attacker to execute arbitrary client-side JavaScript...

GHSA-HM8R-95G3-5HJ9 phpMyFAQ Stored Cross-site Scripting at File Attachments

Summary An attacker with admin privileges can upload an attachment containing JS code without extension and the application will render it as HTML which allows for XSS attacks. Details When attachments are uploaded without an extension, the application renders it as HTML by default. Therefore...

5g-fe-components (>=1.0.6, <=1.1.0), @0xgg/echomd (>=1.0.0, <=1.0.4) +1327 more potentially affected by CVE-2024-28246 via katex (>=0.11.0, <=0.16.9)

katex NPM version =0.11.0, =1.0.6, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =1.2.1 and more Source cves: CVE-2024-28246 Source advisory: OSV:GHSA-3WC5-FCW2-2329...

GHSA-246P-XMG8-WMCQ OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

Summary A security vulnerability exists in oneuptime's local storage handling, where a regular user can escalate privileges by modifying the ismasteradmin key to true. This allows unauthorized access to administrative functionalities. Details The vulnerability lies in the improper validation of...

CVE-2024-27300

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The email field in phpMyFAQ's user control panel page is vulnerable to stored XSS attacks due to the inadequacy of PHP's FILTERVALIDATEEMAIL function, which only validates the email format, not...

CVE-2024-27300

Summary: CVE-2024-27300 affects phpMyFAQ; the vulnerability is a stored XSS in the user email field caused by inadequate validation from PHP’s FILTER_VALIDATE_EMAIL. An attacker can inject JavaScript that is stored and later rendered in another user’s session. The issue is documented across multi...

CVE-2024-29194

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

CVE-2024-29194

OneUptime web application vulnerability: localStorage key is_master_admin can be changed from false to true, bypassing server-side checks and granting administrative privileges to a regular user. Root cause: improper validation of client-side stored data in the web app; privileges are controlled ...

CVE-2024-29194 OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

CVE-2024-29194 OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

CVE-2023-6960: Undefined Security Weakness

TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended deletion...

TTLock Security Vulnerability

TTLock is a smart lock. The TTLock App suffers from a security vulnerability that stems from virtual keys and settings being deleted only on the client side, allowing an attacker to access the lock after deletion...

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client-side proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from an existing policy that allows an attacker to bypass the proxy...

Unsafe Reflection

stimulusreflex is vulnerable to Unsafe Reflection. The vulnerability is due to insufficient validation of methods that can be called on Reflex instances. This vulnerability allows attackers to execute methods not intended for client-side interaction...

[SECURITY] Fedora 40 Update: jfreechart-1.5.4-5.fc40

JFreeChart is a comprehensive free chart library for the Java platform that c an be used on the client-side JavaFX and Swing or the server side with export to multiple formats including SVG, PNG and PDF...

PT-2024-15143 · Sciener · Sciener Firmware

Name of the Vulnerable Software and Affected Versions: TTLock App affected versions not specified Description: The TTLock App has an issue where virtual keys and settings are only deleted on the client side. If these deleted items are preserved, they can still be used to access the lock after the...