CVE-2022-32131

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in /index/notice/show. An attacker could exploit...

Ubuntu 16.04 ESM : Vim vulnerability (USN-5492-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5492-1 advisory. It was discovered that Vim incorrectly handled memory when opening and searching the contents of certain files. If an attacker could trick a user into opening a...

PT-2022-21109

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A reflective cross-site scripting XSS issue was found in 74cmsSE. The issue can be exploited via the "/index/notice/show" API endpoint. Recommendations For version 3.5.1, update to a newer version that contain...

CVE-2022-32131: Improper Neutralization of Input During Web Page Generation

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

Malicious code in shipping-notice-ui-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3be4a355ac0eb601e2bbf8b35164dffb1d93edab3e82e741a8dafef941177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6088 Malicious code in shipping-notice-ui-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3be4a355ac0eb601e2bbf8b35164dffb1d93edab3e82e741a8dafef941177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2087

A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affects the file /mnotice.php?id=2. The manipulation of the argument notice with the input alert1 leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2022-2087: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affects the file /mnotice.php?id=2. The manipulation of the argument notice with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

编号撤回

This CVE number has been withdrawn...

PT-2022-14848

Name of the Vulnerable Software and Affected Versions SourceCodester Bank Management System version 1.0 Description A problematic issue was found in the system, affecting the file "/mnotice.php?id=2". The manipulation of the notice argument with the input alert1 leads to cross-site scripting. It ...

CVE-2022-32333

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...

May 10, 2022—KB5013945 (OS Build 18363.2274)

None None...

CVE-2022-32562

creationtimestamp| type| source ---|---|--- 2022-06-14 02:18:23+00:00| seen| https://t.me/cibsecurity/44351...

PT-2022-3534 · Schneider Electric · Conext Combox

Name of the Vulnerable Software and Affected Versions: Conext ComBox versions all Description: The issue is related to improper restriction of rendered UI layers or frames in the user interface, which could allow a remote adversary to affect data integrity by tricking the user into interacting wi...

Ubuntu 18.04 LTS / 20.04 LTS : ca-certificates update (USN-5473-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5473-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.50 version...

编号撤回

This CVE number has been withdrawn...

Spectra < 1.25.6 - Reflected Cross-Site Scripting

The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC When the admin notice about Usage Tracking is displayed: https://example.com/wp-admin/index?a"...

编号撤回

This CVE number has been withdrawn...

USN-5355-1: zlib vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or...