Lucene search
+L

681 matches found

GithubExploit
GithubExploit
•added 2024/03/08 10:39 a.m.•508 views

Exploit for CVE-2024-23780

CVE-2024-23780 Exploit for Netbox This script exploits CVE-20...

8.5AI score
SaveExploits1
Positive Technologies
Positive Technologies
•added 2024/03/08 12:00 a.m.•37 views

PT-2024-20080 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: NetBox affected versions not specified Description: The issue affects NetBox's security landscape. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

7.2AI score
SaveExploits1References2
NVD
NVD
•added 2024/01/26 10:15 p.m.•48 views

CVE-2024-0948

DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...

6.1CVSS4.2AI score0.00531EPSS
SaveExploits1References4
Prion
Prion
•added 2024/01/26 10:15 p.m.•25 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The attack may be...

3.3CVSS6.3AI score0.00531EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2024/01/26 9:31 p.m.•33 views

CVE-2024-0948 NetBox Home Page Configuration config-revisions cross site scripting

DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...

2.4CVSS3.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/01/26 9:31 p.m.•30 views

CVE-2024-0948 NetBox Home Page Configuration config-revisions cross site scripting

DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...

3.3CVSS6AI score0.00531EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/01/26 9:31 p.m.•64 views

CVE-2024-0948 NetBox Home Page Configuration config-revisions cross site scripting

DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...

3.3CVSS6.1AI score0.00531EPSS
SaveExploits1References4
CVE
CVE
•added 2024/01/26 9:31 p.m.•115 views

CVE-2024-0948

NetBox is affected up to version 3.7.0 by a vulnerability in the /core/config-revisions handler that can lead to cross-site scripting when processing input such as test. Descriptions consistently indicate the issue is a XSS flaw resulting from unknown processing in the Home Page Configuration com...

6.1CVSS5.9AI score0.00531EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/26 12:00 a.m.•19 views

PT-2024-15929 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: NetBox versions up to 3.7.0 Description: A problematic issue has been found in the processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The...

6.1CVSS3.8AI score0.00531EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/26 12:00 a.m.•7 views

CVE-2024-0948: Improper Neutralization of Input During Web Page Generation

DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...

6.1CVSS3.7AI score0.00531EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/26 12:00 a.m.•19 views

NetBox Cross-Site Scripting Vulnerability

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox 3.7.0 and earlier versions, which stems from /core/config-revisions in the component Home Page...

6.1CVSS5.9AI score0.00531EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2023/09/20 10:15 p.m.•10 views

CVE-2023-36234

Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...

5.4CVSS6.5AI score0.00423EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/20 10:15 p.m.•41 views

CVE-2023-36234

Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...

5.4CVSS5.5AI score0.00423EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/20 10:15 p.m.•27 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...

4.9CVSS5.6AI score0.00423EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/09/20 12:00 a.m.•19 views

NetBox Cross-Site Scripting Vulnerability

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version 3.5.1 that originates from allowing an attacker to execute arbitrary code via the Name field in the...

5.4CVSS7.7AI score0.00423EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/20 12:00 a.m.•79 views

CVE-2023-36234

NetBox 3.5.1 contains a Cross-Site Scripting (XSS) vulnerability exploitable via the Name field in device-roles/add. The root cause is not explicitly detailed in the provided documents beyond the XSS issue. Impact per the CVE metrics indicates limited impact with a Medium severity (CVSS v3.1: AV:...

5.4CVSS5.5AI score0.00423EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/20 12:00 a.m.•18 views

PT-2023-25491 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: The issue allows attackers to execute arbitrary code via the Name field in the device-roles/add function, which is a Cross Site Scripting XSS vulnerability. This enables attackers to inject malicious scripts...

5.4CVSS5.6AI score0.00423EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2023/09/20 12:00 a.m.•45 views

CVE-2023-36234

Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...

5.7AI score0.00423EPSS
SaveExploits1References1
Mend
Mend
•added 2023/09/20 12:00 a.m.•3 views

CVE-2023-36234

Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...

5.4CVSS0.00423EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/20 12:00 a.m.•5 views

CVE-2023-36234: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...

5.4CVSS6.5AI score0.00423EPSS
SaveExploits1References2
Rows per page
Query Builder