CVE-2023-6709 Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

GHSA-W4X6-HH3X-WJRX Stale copy of the public suffix list

We have identified that this project contains an out-of-date version of the Public Suffix List https://publicsuffix.org/. We are carrying out research to identify the potential impacts of using old versions of the Public Suffix List, and we intend to publish our results in academic conferences an...

CVE-2023-6599 Missing Standardized Error Handling Mechanism in microweber/microweber

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

Code injection

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

PHPJabbers Time Slots Booking Calendar 4.0 Missing Rate Limiting

Exploit Title: PHPJabbers Time Slots Booking Calendar v4.0 - No Rate Limit in Email Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/time-slots-booking-calendar/ Version: v4.0 Tested...

CVE-2023-6461 Cross-site Scripting (XSS) - Reflected in viliusle/minipaint

Cross-site Scripting XSS - Reflected in GitHub repository viliusle/minipaint prior to 4.14.0...

Exploit for CVE-2022-30190

AmzWord an automated attack chain based on CVE-2022-30190, 16...

sequelize-typescript Prototype Pollution vulnerability

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...

CVE-2023-6293

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...

CVE-2023-6293

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...

Code injection

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...

CVE-2023-6293

CVE-2023-6293 affects the sequelize-typescript project owned by robinbuschmann. The issue is a Prototype Pollution vulnerability in the repository prior to version 2.1.6, arising from unsafe handling in object property assignment (deepAssign as cited by Veracode) that can allow modification of th...

Shuttle Booking Software 2.0 Cross Site Scripting Vulnerability

Exploit Title: Shuttle Booking Software v2.0 - Multiple Stored Cross-Site Scripting Authenticated Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/shuttle-booking-software/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/...

SUSE CVE-2022-4806

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

VulnCheck KEV: CVE-2022-0482

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3...

CVE-2023-6022 Cross-Site Request Forgery (CSRF) in prefecthq/prefect

Cross-Site Request Forgery CSRF in GitHub repository prefecthq/prefect prior to 2.16.5...

CVE-2023-6131

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6130

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...