119 matches found
CVE-2021-47855: Improper Neutralization of Input During Web Page Generation
Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the...
Litespeed Technologie OpenLiteSpeed Cross-Site Script Vulnerability
Litespeed Technologie OpenLiteSpeed is an open-source web server developed by Litespeed Technologie. Version 1.7.9 of Litespeed Technologie OpenLiteSpeed contains a cross-site scripting vulnerability. This vulnerability stems from a stored-cross-site scripting vulnerability in the dashboard’s Not...
Openlitespeed-WebServer-1.7.8-
This is a PoC exploit for a command injection vulnerability in O...
EUVD-2020-26682
Malware in sbrugna...
EUVD-2018-11471
Malware in sbrugna...
EUVD-2018-11470
Malware in sbrugna...
EUVD-2021-13545
Malware in sbrugna...
EUVD-2023-45089
Malicious code in bioql PyPI...
EUVD-2022-15295
Malicious code in bioql PyPI...
EUVD-2024-29492
Malicious code in bioql PyPI...
EUVD-2022-15293
Malicious code in bioql PyPI...
CVE-2022-0072
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1...
CVE-2020-5519
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...
VulnCheck KEV: CVE-2022-0073
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...
VulnCheck KEV: CVE-2022-0074
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1...
CVE-2024-31617
OpenLiteSpeed before 1.8.1 mishandles chunked encoding...
CVE-2022-0073
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...
CVE-2024-31617
OpenLiteSpeed before 1.8.1 mishandles chunked encoding...
CVE-2024-31617
The OpenLiteSpeed web server, in versions prior to 1.8.1 , contains a security vulnerability caused by the mishandling of chunked encoding . This flaw can lead to the allocation of resources without limits or throttling . To remediate this issue, users are recommended to update to OpenLiteSpeed v...
