502 matches found
CVE-2022-36948
In Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10...
CVE-2022-36948
CVE-2022-36948 describes a DOM-based XSS in Veritas NetBackup OpsCenter. Affected versions are 8.x–8.3.0.2, 9.x–9.0.0.1, 9.1.x–9.1.0.1, and 10. The connected PT-2022-23695 entry provides remediation guidance: upgrade to a version later than 8.3.0.2 for 8.x, later than 9.0.0.1 for 9.x, later than ...
Cross-Site Request Forgery (CSRF)
microweber/microweber is vulnerable to cross site request forgery. The vulnerability exists due to a dom XSS in index.php because the user input for type parameter is not properly escaped which allows an attacker to steal tokens and gain access to sensitive information resulting a csrf...
Cross-site scripting - DOM
Description DOM XSS with filter bypass on /demo/module/ using type parameter without authentication. Proof of Concept...
Radancy: Admin account/panel takeOver and Doing actions in admin panel via DOM-based XSS
Hello team , I found Dom-XSS in your https://████████/ Webmail Admin Panel that manage attacker to stealing admin sensitive info and doing any action in your webmail admin panel . why and how this vulnerability happen : - if your reviewed the source code of this endpoint of the admin panel "...
CVE-2022-23077
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...
Hardcoded credentials
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...
CVE-2022-23077 Habitica - DOM XSS in login page
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...
CVE-2022-23077
Habitica (HabitRPG) versions 4.119.0–4.232.2 are affected by a DOM-based XSS on the login page. Root cause: insufficient validation/escaping of user-supplied data leading to reflected input in the DOM. Impact: cross-site scripting via the login page; potential for session/credential exposure if u...
CVE-2022-23077 Habitica - DOM XSS in login page
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...
Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting
The plugin does not sanitise and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue PoC...
GHSA-9XWQ-72VP-5J3C Cross-site Scripting in Apache Atlas
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...
Cross-site Scripting in Apache Atlas
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...
CVE-2022-1555
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...
Code injection
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...
CVE-2022-1555
CVE-2022-1555 describes a DOM XSS in Microweber versions
CVE-2022-1555 DOM XSS in microweber ver 1.2.15 in microweber/microweber
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...
DOM XSS in microweber ver 1.2.15
Description Hi there, on your latest version docker images 3463db62a01f, vulnerable to DOM XSS. Proof of Concept...
Dom xss leads to account takeover
Description The endpoint of login allows Javascript payload to execute which leads to XSS pop-up Proof of Concept Send this link to admin http://127.0.0.1:2222/login/?redirect=javascript:alertdocument.cookie When he will open it and try to login XSS will popup. Image POC...