The vulnerability of the Squid proxy server, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to inject arbitrary HTTP headers.

The vulnerability of the Squid proxy server is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma arises from incorrect handling of characters such as CR, LF, /r, and /n before data is inserted into HTTP headers. This allows attackers to perform cross-site scripting attacks.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to the improper elimination of characters CR, LF, /r, and /n before data is entered into the HTTP headers. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2020-23974

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...

CVE-2020-23974

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...

Cross site scripting

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...

CVE-2020-23974

CVE-2020-23974 affects Create-Project Manager 1.07. The issue is described as Multi Persistent Cross-site Scripting and HTML injection via UI surfaces such as Online chat, Social feed, Message(title-tag), and Add new client (all-tags). The provided documents do not specify the root cause details,...

CVE-2020-23974

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...

CVE-2020-8218

creationtimestamp| type| source ---|---|--- 2020-08-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=506 2020-08-29 11:05:49+00:00| published-proof-of-concept| https://t.me/cKure/2007 2020-08-29 11:29:34+00:00| published-proof-of-concept|...

CVE-2020-24314

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL...

CVE-2020-24314

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL...

Cross site scripting

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL...

CVE-2020-24314

Affected software: Fahad Mahmood RSS Feed Widget Plugin for WordPress, v2.7.9 and earlier. Vulnerability: Reflected XSS via the GET parameter "t" that is echoed into an input tag without sanitization. Impact: Attackers can craft a URL to trigger XSS (no exploitation details beyond this). Exploita...

CVE-2020-24314

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL...

WordPress RSS Feed Widget plugin <= 2.8.0 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by zerodetail & ratherbland in WordPress RSS Feed Widget plugin versions = 2.8.0. Solution Update the WordPress RSS Feed Widget plugin to the latest available version at least 2.8.1...

PT-2020-15679 · Fahad Mahmood · Fahad Mahmood Rss Feed Widget Plugin

Name of the Vulnerable Software and Affected Versions: Fahad Mahmood RSS Feed Widget Plugin versions 2.7.9 and lower Description: The issue is related to a reflected XSS vulnerability. It occurs because the value of the t GET parameter is not sanitized before being echoed back inside an input tag...

CVE-2020-1380

creationtimestamp| type| source ---|---|--- 2020-08-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=499 2020-08-12 10:03:34+00:00| published-proof-of-concept| https://t.me/cKure/1816 2020-08-12 11:34:34+00:00| exploited| https://t.me/truesecator/839 2020-08-13...

RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)

The RSS Feed Widget WordPress plugin version 2.8.0 and below was vulnerable to Authenticated Cross-Site Scripting XSS within the "t" GET parameter. http://www.example.com/wp-admin/admin.php?page=rfwoptions&t=1"alert"xss"...

RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)

The RSS Feed Widget WordPress plugin version 2.8.0 and below was vulnerable to Authenticated Cross-Site Scripting XSS within the "t" GET parameter. PoC http://www.example.com/wp-admin/admin.php?page=rfwoptions=1"...

CVE-2020-9934

creationtimestamp| type| source ---|---|--- 2020-07-29 21:39:06+00:00| published-proof-of-concept| https://t.me/cKure/1562 2020-07-31 16:59:59+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6558 2020-09-11 20:09:25+00:00| seen|...

iOS14 shows Instagram opens camera even when users scroll photo feed

By Zara Khan iPhone's iOS14 shows that Instagram opens the user's camera even when... This is a post from HackRead.com Read the original post: iOS14 shows Instagram opens camera even when users scroll photo feed...