20188 matches found
Gitlab -- Vulnerabilities
Gitlab reports: ReDoS via EpicReferenceFilter in any Markdown fields New commits to private projects visible in forks created while project was public New commits to private projects visible in forks created while project was public Maintainer can leak masked webhook secrets by manipulating URL...
Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator may be vulnerable to html injection due to [CVE-2023-24539]
Summary IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to html injection. This bulletin provides patch information to address the reported vulnerability in Golang Go. CVE-2023-24539 Vulnerability Details CVEID:CVE-2023-24539 DESCRIPTION: Go is vulnerable to...
Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator may be vulnerable to HTML injection due to [CVE-2023-24540]
Summary IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to HTML injection. This bulletin provides patch information to address the reported vulnerability in Golang Go. CVE-2023-24540 Vulnerability Details CVEID:CVE-2023-24540 DESCRIPTION: Go is vulnerable to...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to HTML injection (CVE-2023-27864)
Summary IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to HTML injection. Vulnerability Details CVEID:CVE-2023-27864 DESCRIPTION: IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which...
Active Matrimonial CMS 1.6 HTML Injection
==================================================================================================================================== | Title : Active Matrimonial CMS v 1.6 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...
Improper Input Validation
craftcms/redactor, is vulnerable to Improper Input Validation. The vulnerability exists because the html is not properly validated which allows an attacker to inject payloads via HTML Injection...
Trend Micro Apex Central Cross-Site Scripting Vulnerabilities
Trend Micro Apex Central is a Web-based console from Trend Micro, Inc. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...
Trend Micro Apex Central Cross-Site Scripting Vulnerabilities
Trend Micro Apex Central is a Web-based console from Trend Micro, Inc. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged-in admin open a page containing the HTML code below. "/...
Trend Micro Apex Central Cross-Site Scripting Vulnerabilities
Trend Micro Apex Central is a Web-based console from Trend Micro, Inc. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...
Active Matrimonial CMS 1.5 HTML Injection
==================================================================================================================================== | Title : Active Matrimonial CMS v 1.5 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...
Adiscon LogAnalyzer 4.1.5 Cross Site Scripting
==================================================================================================================================== | Title : Adiscon LogAnalyzer V 4.1.5 Xss Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 Français V.Pro | | Vendor :...
Active Newspaper 2.0 HTML Injection
==================================================================================================================================== | Title : Active Newspaper v2.0 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit...
Active Matrimonial CMS 1.4 HTML Injection
==================================================================================================================================== | Title : Active Matrimonial CMS v 1.4 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...
WS-2023-0204
HTML injection in title of reader view in Brave: Reader.html in doesn't escape/trim HTML tags in %READER-TITLE%. This allows any page to inject malicious HTML code in reader-mode page through html code you want to inject...
GHSA-M3V5-GJJ9-RG24 Craft CMS vulnerable to HTML injection
Craft CMS through 4.4.9 is vulnerable to HTML Injection...
Craft CMS vulnerable to HTML injection
Craft CMS through 4.4.9 is vulnerable to HTML Injection...
CVE-2023-33495
Craft CMS through 4.4.9 is vulnerable to HTML Injection...
