PT-2024-32307

Name of the Vulnerable Software and Affected Versions Ikhgur mn.ikhgur.khotoch aka Video Downloader Pro & Browser versions 1.0.42 and earlier Description The issue allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component. This could potentially lead...

CVE-2024-46962: Improper Control of Generation of Code

The SYQ com.downloader.video.fast aka Master Video Downloader application through 2.0 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component...

PT-2024-32304

Name of the Vulnerable Software and Affected Versions com.superfast.video.downloader aka Super Unlimited Video Downloader - All in One versions 5.1.9 and earlier Description The issue allows an attacker to execute arbitrary JavaScript code via the com.bluesky.browser.ui.BrowserMainActivity...

CVE-2024-46966: Improper Control of Generation of Code

The Ikhgur mn.ikhgur.khotoch aka Video Downloader Pro & Browser application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component...

CVE-2024-46965: Improper Control of Generation of Code

The DS allvideo.downloader.browser aka Fast Video Downloader: Browser application through 1.6-RC1 for Android allows an attacker to execute arbitrary JavaScript code via the allvideo.downloader.browser.DefaultBrowserActivity component...

PT-2024-32306

Name of the Vulnerable Software and Affected Versions allvideo.downloader.browser aka Fast Video Downloader: Browser versions 1.6-RC1 and earlier Description The issue allows an attacker to execute arbitrary JavaScript code via the allvideo.downloader.browser.DefaultBrowserActivity component. Thi...

PT-2024-32303

Name of the Vulnerable Software and Affected Versions Master Video Downloader versions through 2.0 Description The issue allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component. Recommendations For Master Video Downloader versions through...

Inshot Video Downloader 安全漏洞

InShot Inshot Video Downloader is a video download application from InShot. A security vulnerability exists in Inshot Video Downloader version 1.3.5 and earlier, which stems from the presence of an arbitrary JavaScript code execution vulnerability...

CVE-2024-46960: Improper Control of Generation of Code

The ASD com.rocks.video.downloader aka HD Video Downloader All Format application through 7.0.129 for Android allows an attacker to execute arbitrary JavaScript code via the com.rocks.video.downloader.MainBrowserActivity component...

CVE-2024-46961: Improper Control of Generation of Code

The Inshot com.downloader.privatebrowser aka Video Downloader - XDownloader application through 1.3.5 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.privatebrowser.activity.PrivateMainActivity component...

Cross-Site Scripting (XSS)

org.apache.nifi,nifi-web-ui is vulnerable to cross-site scripting XSS. The vulnerability is due to insufficient input validation on the description field for Parameters in the Parameter Context configuration, allowing an authenticated user to insert arbitrary JavaScript code, which the client...

IBM CICS TX Standard Web UI Cross-Site Scripting Vulnerability

IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM, Inc. It can provide a cloud-native deployment model for standalone applications. A cross-site scripting vulnerability exists in IBM CICS TX Standard version 11.1, which stems from...

Exploit for Cross-site Scripting in Roundcube Webmail

Exploit Title: Roundcube mail server exploit for CVE-2024-373...

CVE-2024-41745

CVE-2024-41745 affects IBM CICS TX Standard Web UI with a cross-site scripting (XSS) vulnerability. An unauthenticated attacker can embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. IBM-issued guidance indicates the vulnerability is ...

CVE-2024-41745 IBM CICS TX Standard cross-site scripting

IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-10652

CVE-2024-10652 affects CHANGING Information Technology’s IDExpert product. The vulnerability arises from improper validation of a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavaScript by performing a Reflected XSS. Affected versions are referenced ...

CVE-2024-42041

The com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader application 20-30.05.24 for Android allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...

CVE-2024-31972: Improper Neutralization of Input During Web Page Generation

EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execution under the context of the user's session via the Wi-Fi SSID input fields. Web scripts embedded into the vulnerable fields this way are executed immediate...

CVE-2024-42041: Improper Control of Generation of Code

The com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader application 20-30.05.24 for Android allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...

CVE-2024-42041

The com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader application 20-30.05.24 for Android allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...