335 matches found
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
Open redirect
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
PT-2023-21054 · Opencats · Opencats
Name of the Vulnerable Software and Affected Versions: OpenCATS affected versions not specified Description: The issue is related to an open redirect vulnerability that exposes OpenCATS to template injection. This occurs due to improper validation of user-supplied GET parameters. Recommendations:...
CVE-2023-0448
The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability...
CVE-2023-0448
The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability...
Multiple XSS Vulnerabilities in Queue Condition
Description Cross-Site Scripting XSS vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScript code...
There is an RCE vulnerability
Description - There is an RCE vulnerability in qmpaas/leadshop https://github.com/qmpaas/leadshop v1.4.15. An attacker can access the file leadshop.php and call any existing function through GET to control the target host. The vulnerability is in the leadshop/web/leadshop.php27-61 file public...
Siemens SICAM T和Siemens SICAM 安全漏洞
Siemens SICAM T and Siemens SICAM are products of Siemens, Germany.Siemens SICAM T is a digital measurement sensor for industrial environments. The device is used in industrial, power plant and substation environments to measure the amount of electricity in an electrical network in a single...
DEBIAN-CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
Hardcoded credentials
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
UBUNTU-CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
[SECURITY] Fedora 36 Update: aron-0-0.7.20200626git7eade58.fc36
Aron is a GO script for finding hidden GET & POST parameters...
[SECURITY] Fedora 35 Update: aron-0-0.6.20200626git7eade58.fc35
Aron is a GO script for finding hidden GET & POST parameters...
RESI Gemini-Net Cross-Site Scripting Vulnerability
RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...
RESI Gemini-Net 跨站脚本漏洞
RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...