90 matches found
Cockpit - Cross-Site Scripting Detection
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import...
CVE-2026-6626
A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack...
CVE-2026-6626
Technical details are not publicly provided in the supplied documents. The CVE affects Cockpit-HQ Cockpit up to 2.13.5 (Asset Handler/Aggregate Handler data query logic); remote exploit claimed. Monitor for updates.
CVE-2026-6626 Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection
A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack...
CVE-2026-6626 Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection
A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack...
CVE-2026-6626: Improper Neutralization of Special Elements in Data Query Logic
A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack...
CVE-2023-4422
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...
CVE-2023-4433
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4321
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...
CVE-2023-4195
PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...
CVE-2023-4395
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4432
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
Cockpit-HQ Arbitrary File Load
The vulnerability of the Cockpit-HQ package of the Cockpit server management system involves unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to load any desired files...
EUVD-2023-2348
Malicious code in bioql PyPI...
EUVD-2023-2279
Malicious code in bioql PyPI...
EUVD-2023-2368
Malicious code in bioql PyPI...
EUVD-2023-2380
Malicious code in bioql PyPI...
EUVD-2023-0915
Malicious code in bioql PyPI...