CVE-2021-40310

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...

CVE-2021-40310

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...

Cross site scripting

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...

CVE-2021-40310

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...

CVE-2021-40310

OpenSIS Community Edition 8.0 is affected by a cross-site scripting (XSS) flaw in TakeAttendance.php via the cp_id_miss_attn parameter. The vulnerability context and PoC links are documented across multiple sources (e.g., PacketStorm and Exploit-DB entries), illustrating a reflected XSS payload u...

CVE-2021-40310

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...

Cross-Site Request Forgery (CSRF) in hdinnovations/unit3d-community-edition

Description CSRF in flushing peer Proof of Concept 1. Login stafff/admin account 2. Access this link https://unit3d.site/dashboard/flush/peers 3. See that the peers has been flushed. Impact This vulnerability is capable of flushing peers...

Cross-Site Request Forgery (CSRF) in hdinnovations/unit3d-community-edition

Description Attacker is able to change a torrents featured state to un-featured if a logged in user visits attacker website. Proof of Concept When you logged in open this POC.html in a browser. You can check the torrents state changed to un-featured. history.pushState'', '', '/'...

CVE-2021-41381

Payara Micro Community 5.2021.6 and below allows Directory Traversal...

Directory traversal

Payara Micro Community 5.2021.6 and below allows Directory Traversal...

CVE-2021-41381

Payara Micro Community 5.2021.6 and below allows Directory Traversal...

CVE-2021-41381

Payara Micro Community 5.2021.6 and earlier is affected by CVE-2021-41381, a directory traversal vulnerability. The Nuclei template confirms a vulnerable component (Payara Micro Community) and describes exploitation via crafted requests (e.g., / .//WEB-INF/... path) that can access sensitive file...

CVE-2021-41381

Payara Micro Community 5.2021.6 and below allows Directory Traversal...

Payara Micro Community 路径遍历漏洞

Payara Services Ltd Payara Micro Community is a Java web server from Payara Services Ltd, UK. It is used for containerized Jakarta EE application deployments. A path traversal vulnerability exists in Payara Micro Community, which arises from the product's failure to securely handle special...

Modernize Code Quality with ‘Quick Fixes’

Delivering functional code that is reliable, safe, and on schedule is a high priority for most development teams. And you’ll agree that the earlier in your workflow you address quality and security issues, the better and cheaper!. Today, I’d like to give you a quick tour of how you can maximize...

TikTok, GitHub, Facebook Join Open-Source Bug Bounty

Tech giants want hackers to take their money, in exchange for rooting out critical vulnerabilities lurking in the open-source code they use. As more businesses rely on open-source software for mission-critical infrastructure, HackerOne, along with sponsors including Elastic, Facebook, Figma,...

CVE-2021-41082

Discourse is a platform for community discussion. In affected versions any private message that includes a group had its title and participating user exposed to users that do not have access to the private messages. However, access control for the private messages was not compromised as users wer...

CVE-2021-41082

CVE-2021-41082 affects the Discourse platform. In affected versions, the title and participating users of a private message that includes a group could be exposed to users without access to that private message. The issue is an information-disclosure in group-private messages, not a full message-...

QLOG - Windows Security Logging

QLOG provides enriched Event Logging for security related events on Windows based systems. It is under heavy development and currently in alpha state. QLOG doesn’t use API hooks and it doesn’t require a driver to be installed on the target system, QLOG only uses ETW to retrieve its telemetry...

OpenSIS Community Edition Local File Inclusion Vulnerability

OpenSIS is the community edition of an open source enterprise content management system from Alfresco Software, Inc. The system includes document management, office collaboration and other features. openSIS Community Edition in versions prior to 7.6 there is a local file inclusion vulnerability,...