16138 matches found
Online Eyewear Shop 1.0 Cross Site Request Forgery
============================================================================================================================================= | Title : Online Eyewear Shop v1.0 CSRF Add ADmin Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0...
PT-2024-39472 · M Files · M-Files Hubshare
Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 5.0.8.6 Description: The issue allows an authenticated user to spoof the UI through stored HTML injection in the Social Module. Recommendations: For versions prior to 5.0.8.6, update to version 5.0.8.6 or...
python-twisted: Reflected XSS via HTML Injection in Redirect Response
A Cross-site scripting XSS vulnerability exists in Python-Twisted in the twisted.web.util.redirectTo function. This flaw allows an attacker to control the redirect URL, leading to reflected XSS in the HTML body of the redirect response. If exploited, a remote attacker could inject malicious HTML,...
CVE-2024-25411
A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php...
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for Multicloud Management version 2.3 Fix Pack 9 Vulnerability Details CVEID:CVE-2024-1135 DESCRIPTION: Gunicorn is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding headers. By sending a...
HTML Injection
Confidant is vulnerable to HTML Injection. The vulnerability is due to insufficient input validation and sanitization of user-supplied data in several endpoints of the Confidant service, allowing attackers to inject malicious scripts into the application...
CVE-2024-47226
A stored cross-site scripting XSS vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the "Top banner" field. NOTE: Multiple third parties...
SUSE CVE-2024-8907
Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML XSS via a crafted set of UI gestures. Chromium security severity: Medium...
CVE-2024-43025
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail...
Security Bulletin: Vulnerabilities in Golang Go affect IBM watsonx.data
Summary Golang Go could allow a remote attacker to execute arbitrary code on the system and is vulnerable to HTML injection. These can affect watsonx.data. Vulnerability Details CVEID:CVE-2023-24538 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caus...
Security Bulletin: Vulnerabilities in Go affects IBM watsonx.data
Summary Vulnerabilities in the Go package could allow a remote attacker to either inject malicious HTML code into a template causing an HTML injection or execute arbritray code on the system. These vulnerabilities may impact watsonx.data. Vulnerability Details CVEID:CVE-2023-24540 DESCRIPTION: Go...
CVE-2024-43025
Summary: CVE-2024-43025 affects RWS MultiTrans, versions up to 7.0.23324.2, via HTML injection. This can allow altering HTML layout and may enable phishing payloads in sent emails. Technical details: No exploit vectors are provided in the documents beyond the HTML-injection description; affected ...
CVE-2024-43025
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail...
Trados RWS MultiTrans 安全漏洞
Trados RWS MultiTrans is a translation management system from Trados. A security vulnerability exists in Trados RWS MultiTrans v7.0.23324.2 and earlier versions, which stems from the presence of HTML injection vulnerabilities that can be exploited by an attacker to change the HTML layout and...
CVE-2024-43025
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail...
IntelliJ IDEA < 2024.1 HTML Injection
The version of IntelliJ IDEA installed on the remote host is prior to 2024.1. It is, therefore, affected by a vulnerability as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible CVE-2024-46970 Note that Nessus has not tested for...
CVE-2024-46970
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...
CVE-2024-46970
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...
CVE-2024-46970
JetBrains IntelliJ IDEA versions prior to 2024.1 are affected by a cross-site scripting risk due to HTML injection via the project name. The root cause is inadequate protection of the web page structure allowing HTML injection in the project name. Impact is described as HTML injection/XSS in mult...