AZL-8505 CVE-2022-21712 affecting package python-twisted for versions less than 22.2.0-1

twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web. BrowserLikeRedirectAgent functions. Users are advise...

UBUNTU-CVE-2022-21712

twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web. BrowserLikeRedirectAgent functions. Users are advise...

Twisted 信息泄露漏洞

Twisted is an event-driven open source web engine written in Python. An information disclosure vulnerability exists in Twisted that originates from exposing cookies and authorization information during cross-origin redirects...

Apache Synapse 跨站脚本漏洞

Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. A cross-site scripting vulnerability exists in Matrix Synapse versions prior to 1.27.0, which can be exploited by attackers to access cookies and other browser data...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions prior to 9.3, which allows an attacker to exploit the vulnerability to access sensitive cookies...

XSS Vulnerability in Fish Leap CMS

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. A XSS vulnerability exists in FishCenter CMS, which can be exploited by attackers to obtain sensitive information such as user cookies...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-46331)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the Content Provider in versions of Mozilla Firefox prior to 68.10.1 for Android-based platforms. An attacker can exploit the vulnerability to read local files and...

XSS Vulnerability in IF Cloud Technology's Website Builder Showcase System

Fuzhou Yihu Cloud Technology Co. was founded on December 17, 2018 . The company's business scope includes: application software development; cloud software services; information technology consulting services; technology development, technology transfer, technology consulting, and technology...

XSS Vulnerability in DOSSM of Guangzhou Askway Information Technology Co.

Ltd. is a company that provides the travel and hospitality industry with a total solution of "technology", "people" and "process" necessary for marketing in the digital era. A XSS vulnerability exists in DOSSM, which can be exploited by attackers to obtain sensitive information such as user cooki...

XSS Vulnerability in Shanghai Excellence Electronics Group's G2School Course Center

Shanghai Excellence Electronics Group is a company that takes professionalism and service as its corporate tenet to provide users with comprehensive one-card solutions. An XSS vulnerability exists in Shanghai Excellence Electronics Group's G2School Course Center, which can be exploited by attacke...

XSS Vulnerability in UQCMS Cloud Business-B2B2C System

UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System suffers from an XSS vulnerability that can be exploited by attackers to obtain administrator cookie information...

XSS Vulnerability in Website Building System of Yuege Network Technology Co.

Foshan Yuege Network Technology Co., Ltd. focuses on the development of small and medium-sized enterprise website construction and services, is committed to the domestic enterprise marketing website building service brand. Currently serves more than 3200 enterprises. Yuege Networks Technology Co....

DRUPAL-CONTRIB-2019-065

This module that allows you to store external images on your server and apply your own Image Styles. The module exposes cookies to external sites when making external image requests. This vulnerability is mitigated by using the whitelisted host feature to restrict external image requests from...

Imagecache External - Critical - Insecure session token management - SA-CONTRIB-2019-065

This module that allows you to store external images on your server and apply your own Image Styles. The module exposes cookies to external sites when making external image requests. This vulnerability is mitigated by using the whitelisted host feature to restrict external image requests from...

python: Information Disclosure due to urlsplit improper NFKC normalization

It was discovered that python's functions urllib.parse.urlsplit and urllib.parse.urlparse do not properly handle URLs encoded with Punycode/Internationalizing Domain Names in Applications IDNA, which may result in a wrong domain name specifically the netloc component of URL - user@domain:port bei...

python: Information Disclosure due to urlsplit improper NFKC normalization

It was discovered that python's functions urllib.parse.urlsplit and urllib.parse.urlparse do not properly handle URLs encoded with Punycode/Internationalizing Domain Names in Applications IDNA, which may result in a wrong domain name specifically the netloc component of URL - user@domain:port bei...

CVE-2017-17836

In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limited access to airflow, whether it be via XSS or by leaving a machine unlocked can exfiltrate all credentials from the...

Family Connections Has Multiple Cross-Site Scripting Vulnerabilities

Family Connections is an open source content management system that makes it easy and convenient to create private family sites. Family Connections suffers from multiple cross-site scripting vulnerabilities. An attacker can construct XSS statements and perform pop-up box operations to obtain user...

Stored XSS Vulnerability in Celestial Article Management System

Tianren article management system is a set of asp + access code to build the website system. Tianren Article Management System has a stored XSS vulnerability, which can be exploited by attackers to obtain administrator cookie information...

Reflected Cross-Site Scripting Vulnerability in YiDaCMS Yidacms.html.asp Page

YidaCMS website management system is a simple, practical and efficient website builder. A reflective cross-site scripting vulnerability exists in the YiDaCMS Yidacms.html.asp page. An attacker can construct an XSS statement and perform a pop-up box operation to obtain user cookies and other...