855 matches found
CVE-2025-25451: Improper Authentication
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privileges via the "2faauthorized" Local Storage key...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the LocalStorage component where specially crafted Content-Disposition headers containing .. in the filename could be used to access files outside the intended storage directories. Details A Directory Traversal...
PT-2025-11004
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A deadlock issue has been resolved in the Linux kernel related to the bpf Berkeley Packet Filter functionality, specifically when freeing cgroup storage. This issue was introduced by a...
Matrix 授权问题漏洞
Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. Matrix suffers from an authorization issue vulnerability that stems from allowing a remote participant to trigger the download and caching of remote media from a remote home server to a local media repository...
CVE-2025-0228
A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-0228 code-projects Local Storage Todo App index.html cross site scripting
A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-0228 code-projects Local Storage Todo App index.html cross site scripting
A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-0228
The CVE-2025-0228 entry affects code-projects Local Storage Todo App 1.0, specifically the /js-todo-app/index.html file. The root cause is manipulation of the Add argument, which leads to cross-site scripting (XSS). The vulnerability is exploitable remotely, and the exploit has been disclosed pub...
PT-2025-3798 · Unknown · Code-Projects Local Storage Todo App
Name of the Vulnerable Software and Affected Versions: code-projects Local Storage Todo App version 1.0 Description: A problem has been found in the code that affects the /js-todo-app/index.html file. The issue arises from the manipulation of the Add argument, leading to cross-site scripting. Thi...
Code-Projects Local Storage Todo App 代码注入漏洞
Code-Projects Local Storage Todo App is an open source local code storage project by Code-Projects. A code injection vulnerability exists in Code-Projects Local Storage Todo App version 1.0, which originates from a cross-site scripting vulnerability contained in the Add parameter in the...
CVE-2025-0228: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The...
BIT-DISCOURSE-2024-53991 Potential Backup file leaked via Nginx in Discourse
Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore::LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...
CVE-2024-53991 Potential Backup file leaked via Nginx in Discourse
Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore::LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...
Discourse 信息泄露漏洞
Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email, and chat room features. Discourse suffers from an information disclosure vulnerability that stems from the use of FileStore::LocalStore to store uploaded and backed up fil...
PT-2025-9951
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of kmallocGFP ATOMIC in non-preemptible context in PREEMPT RT, which is not safe. The patch enforce...
Cache Poisoning
moodle/moodle is vulnerable to Cache Poisoning. The vulnerability is due to improper validation mechanisms in local storage, allowing attackers to manipulate cached data maliciously...
Moodle vulnerable to cache poisoning via injection into storage
To address a cache poisoning risk in Moodle, additional validation for local storage was required...
CVE-2024-43428
To address a cache poisoning risk in Moodle, additional validation for local storage was required...
