CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

GHSA-8GG8-WR4J-V2WR Gophish vulnerable to Denial of Service via crafted payload involving autofocus

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

Design/Logic Flaw

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

Gophish 安全漏洞

Gophish is an open source phishing framework. A security vulnerability exists in Gophish version 0.12.1, which can be exploited by an attacker to cause a denial of service DoS via a crafted payload...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

MiroTalk P2P 跨站脚本漏洞

MiroTalk P2P is a simple, secure and fast real-time video conferencing software from MiroTalk. A security vulnerability exists in previous versions of MiroTalk P2P f535b35 that stems from the presence of a cross-site scripting XSS vulnerability, which can be exploited by an attacker to inject a...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

D-Link DIR820LA1 操作系统命令注入漏洞

The D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR820LA1FW105B03 version, which stems from the presence of an operating system command injection vulnerability that can be exploited by an attacker to elevate privileges to root via a...

CVE-2023-27069

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field...

Cross site scripting

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field...

CVE-2023-24279

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

TotalJS OpenPlatform 跨站脚本漏洞

TotalJS OpenPlatform is a simple enterprise-ready platform for TotalJS individual developers. It is used to run, integrate and manage multiple web applications. A security vulnerability exists in version b80b09d of TotalJS OpenPlatform, which stems from the presence of a stored cross-site scripti...

CVE-2023-27069

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field...

TotalJS OpenPlatform 跨站脚本漏洞

TotalJS OpenPlatform is a simple enterprise-ready platform for TotalJS individual developers. It is used to run, integrate and manage multiple web applications. A security vulnerability exists in version b80b09d of TotalJS OpenPlatform, which stems from the presence of a stored cross-site scripti...

CVE-2023-27070

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field...

CVE-2023-24279

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

Command injection

OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload...

D-Link DIR820LA1 操作系统命令注入漏洞

D-Link DIR820LA1 is a router from D-Link, a Chinese company. The D-Link DIR820LA1 is vulnerable to a command injection vulnerability that could be exploited by an attacker to elevate privileges to root by designing the payload...