12829 matches found
Nagios XI 跨站脚本漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version v5.8.6, which stems from the discovery of a cross-site...
TA505 Hackers Using TeslaGun Panel to Manage ServHelper Backdoor Attacks
Cybersecurity researchers have offered insight into a previously undocumented software control panel used by a financially motivated threat group known as TA505. "The group frequently changes its malware attack strategies in response to global cybercrime trends," Swiss cybersecurity firm PRODAFT...
Arbitrary file deletion
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...
CVE-2022-36203
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...
CVE-2022-36203
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...
CVE-2022-36203
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...
Cross site scripting
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...
CVE-2022-36203
CVE-2022-36203 involves Doctor’s Appointment System version 1.0 and describes a Cross-Site Scripting (XSS) vulnerability in the admin panel that can result in taking over the administrator account by stealing the cookie. The vulnerability is documented with a CVSS v3.1 base score of 6.1 (Medium) ...
GHSA-RV3R-VQJJ-8C76 Cross-site scripting from content entered in the tags and multiselect fields
Introduction Cross-site scripting XSS is a type of vulnerability that allows to execute any kind of JavaScript code inside the Panel session of the same or other users. In the Panel, a harmful script can for example trigger requests to Kirby's API with the permissions of the victim. Such...
PT-2022-28279 · Kirby · Kirby
Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.5.8.1 Kirby versions prior to 3.6.6.1 Kirby versions prior to 3.7.4 Description: Cross-site scripting XSS allows the execution of JavaScript code inside the Panel session of the same or other users. This vulnerabilit...
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross Site Scripting XSS in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field...
GHSA-RH4R-9689-6XW4 Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross Site Scripting XSS in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field...
CVE-2022-36037
kirby is a content management system CMS that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting XSS is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel,...
Cross site scripting
kirby is a content management system CMS that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting XSS is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel,...
CVE-2022-36037 Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby
kirby is a content management system CMS that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting XSS is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel,...
CVE-2022-36037 Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby
kirby is a content management system CMS that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting XSS is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel,...
CVE-2022-36037
CVE-2022-36037 describes a cross-site scripting (XSS) flaw in Kirby CMS related to the Panel’s multiselect field. The vulnerability arises because Kirby 3.5 used HTML rendering for the raw option value, allowing attackers who can influence the options source (e.g., content of sibling pages or an ...
GHSA-3F89-869F-5W76 Cross-site scripting from dynamic options in the multiselect field
Introduction Cross-site scripting XSS is a type of vulnerability that allows to execute any kind of JavaScript code inside the Panel session of the same or other users. In the Panel, a harmful script can for example trigger requests to Kirby's API with the permissions of the victim. Such...
Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18
In 1993, the video game developers at id Software released Doom, a first-person shooter that placed a nameless protagonist into the fiery depths of hell, equipped with an arsenal of weapons to mow down imps, demons, lost souls, and the intimidating "Barons of Hell." In 2022, the hacker Sick Codes...