EUVD-2023-42416

Malicious code in bioql PyPI...

EUVD-2023-41485

Malicious code in bioql PyPI...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

CVE-2023-38617

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the filter parameter at /api?path=files...

CVE-2023-37600

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /api?path=profile...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

CVE-2023-37600

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /api?path=profile...

CVE-2023-38617

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the filter parameter at /api?path=files...

Cross site scripting

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the filter parameter at /api?path=files...

Design/Logic Flaw

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

CVE-2023-37601: Improper Limitation of a Pathname to a Restricted Directory

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

PT-2023-26533 · Unknown · Office Suite Premium

Name of the Vulnerable Software and Affected Versions: Office Suite Premium Version v10.9.1.42602 Description: A reflected cross-site scripting XSS issue was found in Office Suite Premium via the filter parameter at the "/api?path=files" API endpoint. This allows for potential malicious script...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 contains a local file inclusion (LFI) vulnerability in the /etc/hosts component. The issue is documented in CVE-2023-37601 with a CVSS v3.1 base score of 7.5 (High) and a network attack vector, no user interaction required, and no confidentiality is impacted bey...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

PT-2023-26039

Name of the Vulnerable Software and Affected Versions Office Suite Premium version 10.9.1.42602 Description The issue is related to a local file inclusion LFI vulnerability. It affects the component /etc/hosts. Recommendations For Office Suite Premium version 10.9.1.42602, consider restricting...

CVE-2023-37601

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

CVE-2023-38617: Improper Neutralization of Input During Web Page Generation

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the filter parameter at /api?path=files...

MobiSystems Office Suite Premium 跨站脚本漏洞

MobiSystems Office Suite Premium is an office software suite from MobiSystems. A security vulnerability exists in Office Suite Premium version 10.9.1.42602, which stems from a reflected cross-site scripting XSS vulnerability in parameter id...

CVE-2023-38617

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the filter parameter at /api?path=files...