Cross site scripting

Cross Site Scripting XSS vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL...

Cross-Site Request Forgery (CSRF)

wallabag/wallabag is vulnerable to Cross-Site Request Forgery CSRF. Through the use of a malicious GET request to the /reset/annotations, /reset/entries, /reset/tags, or /reset/archived endpoints, an attacker is able to arbitrary reset annotations, entries, and tags...

CVE-2023-36317

Cross Site Scripting XSS vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL...

PT-2023-25532 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: sourcecodester Student Study Center Desk Management System version 1.0 Description: The issue allows attackers to run arbitrary code via a crafted GET request to the web application URL. This is a Cross Site Scripting XSS vulnerability, which...

CVE-2023-36317: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL...

CVE-2020-23992

Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...

Cross site scripting

Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...

Cross-Site Request Forgery (CSRF)

wallabag/wallabag is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists in the deleteClientAction function of DeveloperController.php as it does not properly validate the CSRF token, which allows an attacker to arbitrarily delete the API key by sending a GET request to the...

CVE-2020-23992

Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...

CVE-2020-23992

Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...

CVE-2020-23992: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...

PT-2023-11658

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.7.1 Description The issue allows remote attackers to run arbitrary code via the returnUrl parameter in a crafted GET request. This is a Cross Site Scripting XSS issue. Recommendations For Nagios XI version 5.7.1, avoid usin...

CVE-2023-39749

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /advresource. This vulnerability is exploited via a crafted GET request...

CVE-2023-39749

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /advresource. This vulnerability is exploited via a crafted GET request...

CVE-2023-39748

An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-39745

TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-39749

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /advresource. This vulnerability is exploited via a crafted GET request...

Buffer overflow

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /advresource. This vulnerability is exploited via a crafted GET request...

Cross site request forgery (csrf)

An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service DoS via a crafted GET request...

TP-LINK TL-WR941ND 安全漏洞

The TP-LINK TL-WR941ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Routers that originates from a buffer overflow vulnerability in component /userRpm/AccessCtrlAccessRulesRpm. An attacker could exploit the vulnerability to cause a denial of service DoS ...