Multiple XSS Vulnerabilities in Queue Condition

Description Cross-Site Scripting XSS vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScript code...

There is an RCE vulnerability

Description - There is an RCE vulnerability in qmpaas/leadshop https://github.com/qmpaas/leadshop v1.4.15. An attacker can access the file leadshop.php and call any existing function through GET to control the target host. The vulnerability is in the leadshop/web/leadshop.php27-61 file public...

Siemens SICAM T和Siemens SICAM 安全漏洞

Siemens SICAM T and Siemens SICAM are products of Siemens, Germany.Siemens SICAM T is a digital measurement sensor for industrial environments. The device is used in industrial, power plant and substation environments to measure the amount of electricity in an electrical network in a single...

DEBIAN-CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

Hardcoded credentials

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

UBUNTU-CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

[SECURITY] Fedora 36 Update: aron-0-0.7.20200626git7eade58.fc36

Aron is a GO script for finding hidden GET & POST parameters...

[SECURITY] Fedora 35 Update: aron-0-0.6.20200626git7eade58.fc35

Aron is a GO script for finding hidden GET & POST parameters...

RESI Gemini-Net Cross-Site Scripting Vulnerability

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...

RESI Gemini-Net 跨站脚本漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...

CVE-2022-29939

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

Cross site scripting

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...

Cross site scripting

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

CVE-2022-29939

LibreHealth EHR 2.0.0 contains multiple XSS vulnerabilities due to lack of sanitization of GET parameters debug and InsId in interface/billing/sl_eob_process.php. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) as a result of unsafely handling user-supplied input in...

CVE-2022-29940

CVE-2022-29940 affects LibreHealth EHR 2.0.0. The issue arises from insufficient sanitization of GET parameters formseq and formid in the file interface/orders/find_order_popup.php , enabling multiple XSS vulnerabilities. The connected sources confirm the vulnerable component and the underlying c...

CVE-2021-41739

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...

LibreHealth EHR 跨站脚本漏洞

LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out-of-the-box or customized for use in a variety of healthcare settings. A security vulnerability exists in LibreHealth EHR 2.0.0, which stems from a missing filter escape for the GET parameter...