12 matches found
EUVD-2013-4736
Malware in sbrugna...
EUVD-2023-42896
Malicious code in bioql PyPI...
Updated python-django packages fix security vulnerability
An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...
WordPress PowerPack Addons for Elementor plugin <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag* vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via htmltag vulnerability discovered by wesley wcraft in WordPress Plugin PowerPack Addons for Elementor versions = 2.7.17...
CVE-2023-34461 Cross-site Scripting (XSS) Availability in PyBB
PyBB is an open source bulletin board. A manual code review of the PyBB bulletin board server has revealed that a vulnerability could have been exploited in which users could submit any type of HTML tag, and have said tag run. For example, a malicious that looks like xss could have been used to r...
CVE-2020-36607
Cross Site Scripting XSS vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag...
CVE-2022-31187
GLPI (Gestionnaire Libre de Parc Informatique) is affected by CVE-2022-31187 due to insufficient neutralization of HTML tags in the global search context. The public advisory states that affected GLPI versions require upgrading to 10.0.3 to resolve the issue, or, if upgrading is not possible, dis...
Amaya Web Browser 10.0.110.1-pre5 - HTML Tag Buffer Overflow (PoC)
Amaya Web Browser 10.0.110.1-pre5 - HTML Tag Buffer Overflow PoC Amaya Web Browser html tag overflow quite a few tags are vulnerable gdb i r eax 0x41414141 1094795585 ecx 0x0 0 edx 0xbfc0ff80 -1077870720 ebx 0x9ec1220 166466080 esp 0xbfc10064 0xbfc10064 ebp 0xbfc10268 0xbfc10268 esi 0xa2f64a0...
Amaya Web Browser 10.0.1/10.1-pre5 (html tag) Buffer Overflow PoC
Exploit for multiple platform in category dos / poc ================================================================= Amaya Web Browser 10.0.1/10.1-pre5 html tag Buffer Overflow PoC ================================================================= Amaya Web Browser html tag overflow quite a few...
CVE-2002-1348
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies...
Invision Board spoof and defacement
-INTRO- All versions of Invisions Board have a flaw in their input filtering that allows an attacker to completely mess up Invision's display and in one case I managed to change the URL of some of the forums links, which could be used to refer users to fake login sites to collect passwords etc...
A Phorum's bug...
Hi! I have founded a bug in Phorum http://phorum.org/. It is possible to inject script code or other html-tag into "subject", "author's name" or "author's e-mail" of a message in Phorum. In the subject name, e-mail input of message you need to write any html-tag like this:...