Lucene search
+L

5159 matches found

OSV
OSV
added 2023/08/31 1:51 a.m.14 views

MAL-2023-7977 Malicious code in react-navigation-area-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc67ff72904c84b476e3f102ad2d7c61225b500ed7e1dc8852166e2c1b88c694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/08/31 1:51 a.m.7 views

Malicious code in react-navigation-area-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc67ff72904c84b476e3f102ad2d7c61225b500ed7e1dc8852166e2c1b88c694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2023/08/30 11:57 p.m.304 views

Exploit for Path Traversal in Stagil Stagil_Navigation

POC script for the vulnerability exposure in the Jira plugin S...

7.5CVSS7.3AI score0.47199EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2023/08/30 3:21 p.m.394 views

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26256...

7.5CVSS7.1AI score0.11615EPSS
SaveExploits7
NVD
NVD
added 2023/08/28 8:15 p.m.29 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

4.8CVSS5AI score0.00438EPSS
SaveExploits2References2
OSV
OSV
added 2023/08/28 8:15 p.m.9 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

4.8CVSS5.9AI score0.00438EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 8:15 p.m.7 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

4.8CVSS5.9AI score0.00438EPSS
SaveExploits2References3
GithubExploit
GithubExploit
added 2023/08/28 8:00 a.m.360 views

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26256POC fofa:body="JIRA"&&body="2.0.50"...

7.5CVSS7.1AI score0.11615EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2023/08/28 8:00 a.m.369 views

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26256POC fofa:body="JIRA"&&body="2.0.50"...

7.5CVSS7.1AI score0.11615EPSS
SaveExploits7
Positive Technologies
Positive Technologies
added 2023/08/28 12:00 a.m.10 views

PT-2023-27026 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.4 Description: A stored cross-site scripting XSS vulnerability in the Create function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field. This...

4.8CVSS5AI score0.00438EPSS
SaveExploits2References9
Vulnrichment
Vulnrichment
added 2023/08/28 12:00 a.m.10 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

5.6AI score0.00438EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2023/08/28 12:00 a.m.37 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

5.1AI score0.00438EPSS
SaveExploits2References2
GithubExploit
GithubExploit
added 2023/08/24 1:57 a.m.158 views

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26255 CVE-2023-26256 POC...

7.5CVSS7.5AI score0.47199EPSS
SaveExploits9
CNNVD
CNNVD
added 2023/08/22 12:00 a.m.10 views

Moodle 安全漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from a security vulnerability that stems from an insufficient restriction that allows students to bypass sequential...

5.5AI score
SaveExploits0References1
CNVD
CNVD
added 2023/08/19 12:00 a.m.50 views

ASUSTOR Data Master Input Validation Error Vulnerability (CNVD-2023-64212)

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. An input validation error vulnerability exists in ASUSTOR Data Master, which stems from the Printer service's inability to adequately process user input, and can be exploited by an attacker to navigate to anoth...

8.5CVSS6.7AI score0.00642EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/08/07 1:41 a.m.23 views

Improper Input Validation

chromium is vulnerable to Improper Input Validation. Insufficient data validation in DevTools allow a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.6AI score0.00372EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:00 a.m.12 views

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to circumvent existing navigation restrictions.

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...

7.8CVSS6.5AI score0.00372EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
added 2023/08/06 11:23 p.m.39 views

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to inappropriate implementation in Autofill in Google Chrome which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

5.4CVSS6.3AI score0.00454EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:00 a.m.14 views

The vulnerability of Google Chrome’s Autofill function allows attackers to circumvent navigation restrictions.

The vulnerability of Google Chrome’s Autofill function is related to improper authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

6.4CVSS5.8AI score0.00454EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/07/29 12:15 a.m.28 views

CVE-2023-2314

Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.2AI score
SaveExploits0References4
Rows per page
Query Builder