CVE-2021-32608

CVE-2021-32608 affects SmartStoreNET up to version 4.1.1. The root cause is that Views/Boards/Partials/_ForumPost.cshtml renders user-controlled forum post text (FormattedText) without persistent sanitization, enabling a sanitize-then-transform issue. The vulnerability is demonstrated via Cross-S...

Smartstore SmartStoreNET 安全漏洞

Smartstore SmartStoreNET is an open source e-commerce Web platform of Germany Smartstore company . The platform includes CRM, CMS, sales, marketing, payment, order processing and other functions. A security vulnerability exists in SmartstoreNET version 4.1.1. The vulnerability stems from the...

PT-2021-19805 · Unknown · Smartstore

Name of the Vulnerable Software and Affected Versions: Smartstore aka SmartStoreNET versions through 4.1.1 Description: An issue was discovered where the Views/Boards/Partials/ ForumPost.cshtml file does not call HtmlUtils.SanitizeHtml on certain text for a forum post, potentially leading to issu...

XSS Vulnerability in Octopus-Forum

Octopus-Forum is a community system developed using java. Octopus-Forum suffers from an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

forum-java is vulnerable to XSS

forum-java is an open source modern community platform. forum-java has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

[SECURITY] Fedora 32 Update: python-pygments-2.4.2-9.fc32

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

[SECURITY] Fedora 33 Update: python-pygments-2.6.1-6.fc33

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

OGUsers hacker forum hacked for 4th time; database leaked

By Waqas OGUsers was also hacked in May 2019, April 2020, and December 2020. This is a post from HackRead.com Read the original post: OGUsers hacker forum hacked for 4th time; database leaked...

Hacker dumps sensitive household records of 250M Americans

By Waqas As seen by Hackread.com, the database was leaked on a prominent hacker forum and comprises 263 GB worth of records. This is a post from HackRead.com Read the original post: Hacker dumps sensitive household records of 250M Americans...

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

Design/Logic Flaw

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

CVE-2020-28141

CVE-2020-28141 affects Online Discussion Forum 1.0. The vulnerability is a reflected/stored XSS in the message body: an authenticated attacker can send messages containing JavaScript to other users, which executes when those users view the messages page. Sources in the connected documents confirm...

Online Discussion Forum 跨站脚本漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A security vulnerability exists in Online Discussion Forum 1.0, which can be exploited by an attacker to send a message to any user on the system...

XMB 跨站脚本漏洞

XMB is a lightweight PHP forum software. XMB suffers from a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

Mail.ru: [tanks.mail.ru] SSRF + Кража cookie

Введение: Этим прекрасным вечером решили начать движок форума vBulletin, ведь он стоит на 7 сайтах которые относятся к Ext.B, а награды Вы там подняли в 3 раза практически, звучит вкусно : Глаз упал на forumrunner, ведь там была sql-injcve 16 года ПРимерно за час была обнаружена SSRF, да не прост...

ParkMobile parking app data breach – 21M user records stolen, sold

By Habiba Rashid The sample data from ParkMobile shared by a hacker on a cybercrime forum reveals data allegedly belonging to some big names. This is a post from HackRead.com Read the original post: ParkMobile parking app data breach - 21M user records stolen, sold...

Acronis: Cross-site Scripting (XSS) - Stored | forum.acronis.com

Summary There is an XSS vulnerability in the search function of the forum forum.acronis.com. Steps To Reproduce 1. Modify your own forum Nickname, add the following payload after the original nickname: alert0 2. Fill in your nickname in the Author form of the search function and wait for the...

Arbitrary File Read Vulnerability in the javaee Forum System of Beijing Weike Tongshuo Technology Co.

Beijing Weike Tongshuo Technology Co., Ltd. is a professional enterprise that provides Internet full integrated marketing services for large enterprises and organizations. There is an arbitrary file reading vulnerability in the javaee forum system of Beijing Microcomputer Technology Co. Ltd, whic...