PT-2024-1477 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.7 through 16.6.5 GitLab CE/EE versions 16.7 through 16.7.3 GitLab CE/EE versions 16.8 through 16.8.0 Description: An issue has been discovered in GitLab CE/EE, where it is possible for an attacker to trigger a Regular...

PT-2024-1483 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.7 through 16.6.5 GitLab CE/EE versions 16.7 through 16.7.3 GitLab CE/EE versions 16.8 through 16.8.0 Description: An issue has been discovered in GitLab CE/EE due to improper input sanitization of the user name,...

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from a command injection vulnerability. A remote attacker can use this vulnerability to execute arbitrary code via a crafted string in the...

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from the presence of a buffer overflow vulnerability. A remote attacker can exploit this vulnerability to execute arbitrary code via the length of...

texascommunitypartnerprogram.com Cross Site Scripting vulnerability OBB-3840484

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tRPC vs GraphQL

Deciphering the Cloud Conundrum: An Introduction to tRPC & GraphQL The dynamic domain of cloud technology presents a couple of instrumental methodologies in the arena of APIs: tRPC and GraphQL. Each serves as a potent asset for developers in crafting applications that are resilient, scalable, and...

Progress MOVEit Transfer < 2022.0.10 / 2022.1 < 2022.1.11 / 2023.0 < 2023.0.8 / 2023.1 < 2023.1.3 Multiple Vulnerabilities (January 2024)

The version of Progress MOVEit Transfer, formerly Ipswitch MOVEit DMZ, installed on the remote host is therefore, affected by multiple vulnerabilities as referenced in Progress Community article 000249475. - In Progress MOVEit Transfer versions released before 2022.0.10 14.0.10, 2022.1.11 14.1.11...

CVE-2023-25295

A Cross Site Scripting XSS vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a crafted request to the login panel...

CVE-2023-25295

A Cross Site Scripting XSS vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a crafted request to the login panel...

Cross site scripting

A Cross Site Scripting XSS vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a crafted request to the login panel...

GRN Software Group eVEWA3 Community Cross-Site Scripting Vulnerability

GRN Software Group eVEWA3 Community is a software application from GRN Software Group, Inc. to address management and billing issues on the Internet. A cross-site scripting vulnerability exists in GRN Software Group eVEWA3 Community versions 31 through 53, which stems from the presence of a...

CVE-2023-25295

A Cross Site Scripting XSS vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a crafted request to the login panel...

CVE-2023-25295

CVE-2023-25295 describes a Cross Site Scripting (XSS) in GRUEN eVEWA3 Community, affecting versions 31 through 53, via the file evewa3ajax.php . The vulnerability allows an attacker to escalate privileges by sending a crafted request to the login panel. Reports consistently identify the vulnerabl...

CVE-2024-0187

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-7125

The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post visible on their wall in their profile page, which could allow attackers to make logged in users perform such action via a CSRF attack...

Cross site scripting

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-7125 Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF

The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post visible on their wall in their profile page, which could allow attackers to make logged in users perform such action via a CSRF attack...

CVE-2023-7125

The CVE concerns The Community by PeepSo WordPress plugin prior to version 6.3.1.2, which lacks a CSRF check when creating a user post visible on the user’s profile wall. The underlying issue allows a logged-in attacker to induce a target user to perform a post-creation action via CSRF, as demons...

CVE-2024-0187 Community by PeepSo < 6.3.1.2 - Reflected XSS

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-0187

The vulnerability CVE-2024-0187 affects WordPress plugin Community by PeepSo (before 6.3.1.2). It arises from insufficient sanitisation/escaping of parameters and generated URLs, leading to a Reflected XSS that could target high-privilege users (e.g., admins). Connected sources confirm the affect...