248 matches found
CVE-2023-2591
CVE-2023-2591: Teampass 3.0.6 아이템 레이블의 저장형 HTML 인젝션 - M Nadeem Qazi 최근 인기 있는 비밀번호 관리 도구인 nilsteampassnet/teampass에서 보안 취약점을 발견했습니다. 이 취약점은 CVE-2023-2591로 식별되었으며, 아이템 레이블 필드에 저장형 HTML 인젝션 취약점입니다. 동일한 폴더 접근 권한을 가진 두 사용자가 있는 경우, 악의적인 사용자는 레이블 필드가 HTML 인젝션에 취약한 아이템을 생성할 수 있습니다. 다른 사용자가 해당 아이템을 보면 공격자...
XSS-Catcher
XSS Catcher Un framework per il rilevamento blind XSS e la cattura di dati XSS che funziona su Flask, e . XSS Catcher è uno strumento intuitivo che automatizza gli attacchi Cross-Site Scripting XSS blind e la raccolta dati, inclusi gli screenshot. Dispone di un generatore di payload facile da usa...
bettercap
This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...
forensicscanner
This repository does not have a README...
Malicious code in atel-mcp-openclaw (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...
[SECURITY] Fedora 44 Update: tcpflow-1.6.2-0.1.8d47b53.fc44
tcpflow is a program that captures data transmitted as part of TCP connections flows, and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being...
Anviz Multiple Products
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to conduct reconnaissance, capture or decrypt sensitive data, alter device configurations, gain unauthorized administrative or root‑level access, execute arbitrary code, compromise credentials or...
CVE-2024-55374
REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts...
CVE-2025-65270
CVE-2025-65270 is a reflected XSS vulnerability in ClinCapture EDC versions 2.2.3 and 3.0, allowing an unauthenticated remote attacker to execute JavaScript in the victim’s browser. Root cause involves reflective XSS in ClinCapture EDC. Impact is context of the victim’s browser with low confident...
ClinCapture EDC 安全漏洞
ClinCapture EDC is a clinical trial data capture system from ClinCapture, Inc. A security vulnerability exists in ClinCapture EDC versions 3.0 and 2.2.3, which originates in reflective cross-site scripting and could lead to the execution of JavaScript code by an unauthenticated, remote attacker i...
CVE-2025-54346
A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
EUVD-2025-197628
A Stored Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
CVE-2025-54346
A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
CVE-2025-54348
A Stored Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
Covert Surveillance in Smart Devices: A SCOUR Framework Analysis of Youth Privacy Implications
This paper investigates how smart devices covertly capture private conversations and discusses in more in-depth the implications of this for youth privacy. Using a structured review guided by the PRISMA methodology, the analysis focuses on privacy concerns, data capture methods, data storage and...
GHSA-WQM3-W3P6-XJGM Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the quote function that fails to properly escape special characters. An attacker can execute arbitrary SQL commands by supplying specially crafted input values for database name or table names. Remediation Upgrade...
PT-2025-41380
Name of the Vulnerable Software and Affected Versions Apache Flink CDC version 3.4.0 Description The software is susceptible to a SQL injection due to maliciously crafted identifiers, such as a crafted database name or table name. The attack can only be triggered by a logged-in database user...