Ozeki NG SMS Gateway Cross-Site Scripting Vulnerability

Ozeki NG SMS Gateway is a powerful, reliable and flexible SMS gateway application. A cross-site scripting vulnerability exists in Ozeki NG SMS Gateway 4.17.6 and earlier versions. The vulnerability can be exploited via the Receiver or Recipient field in the mailbox function, the OZFORMGROUPNAME...

CVE-2020-14024

Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the 1 Receiver or Recipient field in the Mailbox feature, 2 OZFORMGROUPNAME field in the Group configuration of addresses, 3 listname field in the Defining address lists configuration, o...

CVE-2020-15051

An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields...

CVE-2020-15051

An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields...

OSV-2020-519 Use-of-uninitialized-value in MOS65XX_group_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15112 Crash type: Use-of-uninitialized-value Crash state: MOS65XXgroupname csgroupname fuzzdisasm.c...

FreeBSD : piwigo -- Multible Vulnerabilities (436d7f93-9cf0-11ea-82b8-4c72b94353b5)

Piwigo reports : Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

Cross site scripting

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

CVE-2020-8089

PVE: CVE-2020-8089 affects Piwigo 2.10.1 with a stored XSS in the Group Name Field on the group_list page. The issue stems from insufficient validation of client-side data, enabling potentially malicious input to be stored and reflected. Connected documents corroborate the vulnerability across mu...

piwigo -- Multible Vulnerabilities

Piwigo reports: Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...

Gitlab -- Multiple Vulnerabilities

The GitLab Team reports: Group Maintainers Can Update/Delete Group Runners Using API GraphQL Queries Can Hang the Application Unauthorized Users Have Access to Milestones of Releases Private Group Name Revealed Through Protected Tags API Users Can Publish Reviews on Locked Merge Requests DoS in t...

The vulnerability of the fly-admin-samba component in the FLY operating system environment of Astra Linux allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-samba component in the FLY operating environment of the Astra Linux system is related to an error that causes an emergency restart of the mnbd service when the name of the user group is changed. Exploiting this vulnerability allows a remote attacker to cause a...

SeedDMS Cross-Site Scripting Vulnerability (CNVD-2019-18509)

SeedDMS is a free document management system with an easy-to-use web-based user interface. A stored cross-site scripting vulnerability exists in out/out.GroupMgr.php in SeedDMS 5.1.11. An attacker can exploit this vulnerability by creating a new group with a JavaScript payload as the group name t...

CVE-2019-12801

out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name...

WordPress: Stored XSS on byddypress Plug-in via groups name

Hi, I found that there is a storage xss in another output group name, but this xss needs to press the key combination to trigger. Just create or modify the group information, set the group name to the following payload, and then access Group page, if you are macos need to press,...

CVE-2018-17167

PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Machine Host Name" or "Server Serial Number" field in the clustering configuration, 2 "name" field in the Edit Group configuration, 3 "Rule Name" field in the Access Control configuration, 4...

CVE-2019-7338

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value on the web page without applying any proper filtration...