Cloudera Hue Cross-Site Scripting Vulnerability (CNVD-2021-85875)

Cloudera Hue is a full-fledged open source SQL helper for querying any database and data repository.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker could use the vulnerability to obtain administrator cookies, etc...

Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

Impact In certain configurations, Apollo Server serves the client-side web app "GraphQL Playground" from the same web server that executes GraphQL operations. This web app has access to cookies and other credentials associated with the web server's operations. There is a cross-site scripting...

GHSA-QM7X-RC44-RRQW Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

Impact In certain configurations, Apollo Server serves the client-side web app "GraphQL Playground" from the same web server that executes GraphQL operations. This web app has access to cookies and other credentials associated with the web server's operations. There is a cross-site scripting...

XSS Vulnerability in Learning Express Cloud Drive

Founded in 1993, Beijing Century Super Star Information Technology Development Limited Liability Company is one of the early companies in China engaged in the digitization of paper materials and the production of electronic publications. An XSS vulnerability exists in Study Pass Cloud Drive, whic...

Cloudera Hue 跨站脚本漏洞

Cloudera Hue is a full-fledged open source SQL helper for querying any database and data repository.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker could use the vulnerability to obtain administrator cookies, etc...

[SECURITY] Fedora 35 Update: curl-7.79.1-1.fc35

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

U.S. Dept Of Defense: Reflected XSS

Description: Hi i found a XSS at a new IP Address ssl points to ███hostname https://███████/WebPuff5.4/Login?signIn=Sign%20In&password=g00dPa%24%24w0rD&url=login.jsp%27%22%26%25%3Cacx%3E%3CScRiPt%20%3Ealert9868%3C/ScRiPt%3E&username=tMtFQiRt References https://owasp.org/www-community/attacks/xss/...

All Vulnerabilities for dearsystems.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| dearsystems.com ---|--- Open Bug Bounty...

CVE-2021-25875

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

CVE-2021-25876

AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

Cross site scripting

AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

CVE-2021-25878

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

Cross site scripting

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

Cross site scripting

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

CVE-2021-25878

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

CVE-2021-25876

AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

CVE-2021-25876

The CVE-2021-25876 entry concerns AVideo/YouPHPTube (versions 10.0 and earlier) with multiple reflected Cross-Site Scripting vulnerabilities exploitable via the u parameter. The underlying causes allow a remote attacker to steal administrator session cookies or perform actions as an administrator...

CVE-2021-25875

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

CVE-2021-25875

The CVE affects AVideo/YouPHPTube versions 10.0 and prior, where multiple reflected cross-site scripting (XSS) vulnerabilities exist in the searchPhrase parameter. The underlying issue enables a remote attacker to steal an administrator’s session cookies or perform actions as an administrator. Th...

Kubernetes: elections.k8s.io uses weak session secret key, may place elections at risk

The elections.k8s.io application used a weak Flask SECRETKEY, the string "N/A", to sign authentication cookies. This allowed the complete compromise of the application, as the session could be manipulated...