Tuleap Cross-Site Scripting Vulnerability

Tuleap is an application lifecycle management system that facilitates agile software development, design projects, V-models, requirements management and IT service management.A cross-site scripting vulnerability exists in versions prior to Tuleap 13.9.99.111, which stems from a failure to properl...

Mozilla: Unavailable PAC file resulted in OCSP requests being blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that if a PAC URL was set and the server that hosts the PAC was not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown...

Mozilla: Unavailable PAC file resulted in OCSP requests being blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that if a PAC URL was set and the server that hosts the PAC was not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2022-32988

CVE-2022-32988 is an XSS vulnerability in Asus DSL-N14U-B1 firmware version 1.1.2.3_805. The issue arises in the web UI exposed through a large set of ASP pages that render lists of stored strings, where the *list parameters (examples: filter_lwlist, keyword_rulelist, etc) are not properly saniti...

Denial Of Service (DoS)

firefox and thunderbird are vulnerable to denial of service. The vulnerability exists when a PAC URL is set and the server that hosts the PAC is not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown...

Mozilla: Unavailable PAC file resulted in OCSP requests being blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that if a PAC URL was set and the server that hosts the PAC was not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown...

Mozilla: Unavailable PAC file resulted in OCSP requests being blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that if a PAC URL was set and the server that hosts the PAC was not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown...

WordPress Social Share Buttons by Supsystic plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Social Share Buttons by Supsystic plugin versions prior to 2.2.4 are vulnerable to cross-si...

PT-2022-22343 · Jenkins · Jenkins Validating Email Parameter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Validating Email Parameter Plugin versions 1.10 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This is due to the plugin not escaping the name and description of its parameter type...

WordPress Nested Pages plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Nested Pages plugin version prior to 3.1.21 has a cross-site scripting vulnerability that...

Gallia - Extendable Pentesting Framework

Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of gallia is conducting penetration tests from a single ECU up to whole cars, with the main focus on the UDS interface. Taking advantage of this modular design, the logging and archiving functionality...

Tuleap 跨站脚本漏洞

Tuleap is an application lifecycle management system that facilitates agile software development, design projects, V-models, requirements management and IT service management.A cross-site scripting vulnerability exists in versions prior to Tuleap 13.9.99.111, which stems from a failure to properl...

The vulnerability of the pages.edit.php component in the FlatCore CMS system allows attackers to perform cross-site scripting attacks.

The vulnerability of the pages.edit.php component in the FlatCore CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to the failure to remove script-related HTML tags from web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to the lack of measures taken to eliminate script-related HTML tags on the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

GSD-2022-1003843 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1002561 f2fs: avoid infinite loop to flush node pages

f2fs: avoid infinite loop to flush node pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

CVE-2022-23763

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

CVE-2022-23763

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

CVE-2022-23763 DOUZONE BIZON NeoRS file download and execute vulnerability

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...