CVE-2024-35398

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules...

TOTOLINK CP900L 安全漏洞

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A stack overflow vulnerability exists in the TOTOLINK CP900L v4.1.5cu.798B20221228 version, which stems from the desc parameter in the function setMacFilterRules failing to correctly validate the length size of the...

CVE-2024-1134

The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SEO title and description parameters as well as others in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for attacker...

CVE-2024-4524

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/studentpaymentinvoice.php. The manipulation of the argument desc leads to cross site scripting. It is possible to initiate t...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

CVE-2022-34561

A cross-site scripting XSS vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter...

CVE-2022-34561

A cross-site scripting XSS vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter...

PT-2024-11592 · Phpfox · Phpfox

Name of the Vulnerable Software and Affected Versions: PHPFox version 4.8.9 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter. Recommendations: For PHPFox version 4.8.9,...

CVE-2024-32745: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE DESCRIPTION parameter under the CURRENT PAGE module...

PT-2024-22870 · Addactis · Addactis Ibnrs

Name of the Vulnerable Software and Affected Versions: Addactis IBNRS version 3.10.3.107 Description: The issue allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to the Project Description, Identifiers, Custom Triangle Name inside Input Triangles, and Yield Curve Name...

CVE-2024-2818

Removed by vendor...

CVE-2024-2818

CVE-2024-2818 concerns GitLab CE/EE. Affected are all versions before 16.8.5, all 16.9.x before 16.9.3, and all 16.10.x before 16.10.1. An attacker could cause a denial of service by sending a malicious crafted description parameter for labels. The issue’s remediation is to upgrade to the fixed r...

CVE-2024-2818 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. It was possible for an attacker to cause a denial of service using malicious crafted description parameter for labels...

CVE-2024-2818: Allocation of Resources Without Limits or Throttling

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. It was possible for an attacker to cause a denial of service using malicious crafted description parameter for labels...

PT-2024-23102 · Unknown · Sentrifugo

Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: A Cross-Site Scripting XSS issue exists in Sentrifugo, specifically through the /sentrifugo/index.php/sitepreference/add endpoint, where the description parameter is vulnerable. This could allow a remote us...

eblog 安全漏洞

eblog is a MarkerHub project based on Springboot2.1.2 development of a blog learning project . A security vulnerability exists in eblog v1.0, which stems from a cross-site scripting XSS vulnerability in the argument description parameter...

CVE-2024-29878: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data...

BDTASK Hospital AutoManager Cross-Site Scripting Vulnerability

BDTASK Hospital AutoManager is a powerful hospital management software from BDTASK Bangladesh. BDTASK Hospital AutoManager A cross-site scripting vulnerability exists because /hospitalactivities/birth/form in the component Hospital Activities Page contains unknown processing that leads to...

PT-2024-18860 · Unknown · Bdtask Hospita Automanager

Name of the Vulnerable Software and Affected Versions: Bdtask Hospita AutoManager versions up to 20240223 Description: A problem was found in the Hospital Activities Page component, affecting the processing of the /hospital activities/birth/form file. The issue is related to the manipulation of t...

CVE-2024-25167: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post...