CVE-2023-4309

CVE-2023-4309 affects Election Services Co. (ESC) Internet Election Service. Multiple pages/parameters are vulnerable to SQL injection, allowing an unauthenticated, remote attacker to read or modify data for any elections sharing the same backend database. The public documentation consistently no...

esc-clermont.fr Cross Site Scripting vulnerability OBB-3424013

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

esc-records.de Cross Site Scripting vulnerability OBB-3224037

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

esc bug fix and enhancement update

An update is available for esc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

Metasploit Weekly Wrap-Up

ADCS - ESC Vulnerable certificate template finder Our very own Grant Willcox has developed a new module which allows users to query a LDAP server for vulnerable Active Directory Certificate Services AD CS certificate templates. The module will print the detected certificate details, and the attac...

esc bug fix and enhancement update

An update is available for esc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

PT-2022-25174

Name of the Vulnerable Software and Affected Versions Centreon version 20.10.18 Description The issue is a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload via the esc name parameter at the...

PT-2022-25173

Name of the Vulnerable Software and Affected Versions Centreon version 20.10.18 Description The issue is a SQL injection vulnerability that can be exploited via the esc name parameter, also known as the Escalation Name, at the Configuration/Notifications/Escalations endpoint. This vulnerability...

esc-clermont.fr Cross Site Scripting vulnerability OBB-2846825

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross-site Scripting in tempura

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...

Cross-Site Scripting (XSS)

tempura is vulnerable to cross-site scripting XSS attacks. An attacker is able to inject malicious object type inputs to the esc function resulting in a potential cross-site scripting vulnerability due to the lack of sanitations inside the function...

Cross site scripting

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...

CVE-2021-23784

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...

CVE-2021-23784: Improper Neutralization of Input During Web Page Generation

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...

PT-2021-15551

Name of the Vulnerable Software and Affected Versions: tempura versions prior to 0.4.0 Description: The issue arises when the input to the esc function is of type object, such as an array, and it is returned without being escaped or sanitized. This leads to a potential Cross-Site Scripting issue...

Cross-site Scripting (XSS)

Overview tempura is an A light, crispy, and delicious template engine. Affected versions of this package are vulnerable to Cross-site Scripting XSS. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site...

esc bug fix and enhancement update

An update is available for esc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The esc packages contain the Enterprise Security Client ESC, which allows the use...

PT-2021-1175

Name of the Vulnerable Software and Affected Versions: esc affected versions not specified Description: The Enterprise Security Client ESC is used to manage security smart cards, with its primary function being to enroll smart cards for common cryptographic operations, such as securing e-mail and...

esc bug fix and enhancement update

An update is available for esc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

CVE-2021-1312

A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...