25 matches found
CVE-2020-37179: Buffer Copy without Checking Size of Input
APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...
CVE-2020-37185: Buffer Copy without Checking Size of Input
Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...
Nsasoft BlueAuditor 安全漏洞
Nsasoft BlueAuditor is a Bluetooth network auditing and monitoring tool developed by the US company Nsasoft. Version 1.7.2.0 of Nsasoft BlueAuditor contains a security vulnerability. This vulnerability stems from a buffer overflow in the Name input field, which could lead to a denial-of-service...
Nsasoft Dnss Domain Name Search Software 安全漏洞
Nsasoft Dnss Domain Name Search Software is a domain name search and analysis tool developed by the American company Nsasoft. The Nsasoft Dnss Domain Name Search Software has a security vulnerability, which stems from a buffer overflow in the Name input field. This vulnerability may cause the...
CVE-2020-37212: Buffer Copy without Checking Size of Input
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...
CVE-2020-37195: Buffer Copy without Checking Size of Input
BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...
CVE-2024-57329: Improper Neutralization of Input During Web Page Generation
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads...
CVE-2024-4353 Stored XSS in Generate Board Name Input Field
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concre...
CVE-2024-4353: Improper Input Validation
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concre...
CVE-2024-35581: Improper Control of Generation of Code
A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field...
CVE-2024-31061
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field...
CVE-2024-31061
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field...
CVE-2024-31064: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...
CVE-2024-31061: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field...
CVE-2024-31064
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...
Zabbix Cross-Site Scripting Vulnerability
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A cross-site scripting vulnerability exists in Zabbix, which stems from improper validation of the input field "Name"...
Cross site scripting
Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...
CVE-2020-24075
Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...
CVE-2020-24075
Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...
CVE-2020-24075: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...