Schneider Electric Magelis GTO HMIGTO6310 Control Panel Detection

Binary data 751198.prm...

Schneider Electric Magelis GTO HMIGTO6315 Control Panel Detection

Binary data 751199.prm...

PT-2019-12689 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through 0.9.8.747 Description: A cross-site scripting XSS issue was found in the CentOS Web Panel. The issue is related to the fm current dir or filename parameter in the testacc/fileManager2.php endpoint...

Schneider Electric Magelis XBT XBTGT2930 Control Panel Detection

Binary data 751201.prm...

[SECURITY] Fedora 29 Update: gnome-desktop3-3.30.2.3-1.fc29

gnome-desktop contains the libgnome-desktop library as well as a data file that exports the "GNOME" version to the Settings Details panel. The libgnome-desktop library provides API shared by several applications on the desktop, but that cannot live in the platform for various reasons. There is no...

The vulnerability of the session management function of the Cisco Umbrella cloud security service’s dashboard component allows a attacker to gain access to the monitoring panel.

The vulnerability of the session management function in the web interface of the Cisco Umbrella security service’s dashboard is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain access to the monitoring panel remotely...

Cross-Site Scripting (XSS)

getkirby/kirby is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victims browser via the Title of the "Site options" in the admin panel dashboard dropdown...

CVE-2019-11429

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version, 0.9.8.753 Pro and 0.9.8.807 Pro is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions "Add DNS Zone" screen...

CVE-2019-11429

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version, 0.9.8.753 Pro and 0.9.8.807 Pro is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions "Add DNS Zone" screen...

Design/Logic Flaw

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version, 0.9.8.753 Pro and 0.9.8.807 Pro is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions "Add DNS Zone" screen...

CVE-2019-11429

CVE-2019-11429 affects CentOS Web Panel (CWP) versions 0.9.8.793 (Free/Open Source), 0.9.8.753 (Pro) and 0.9.8.807 (Pro). The vulnerability is a Reflected XSS in the Domain field of the DNS Zone: Add DNS Zone screen. The root cause is insufficient input sanitization in the Domain field, enabling ...

CVE-2019-11429

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version, 0.9.8.753 Pro and 0.9.8.807 Pro is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions "Add DNS Zone" screen...

CVE-2018-16624

panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...

CVE-2018-16623

Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...

CVE-2018-16623

Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...

Cross site scripting

panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...

Cross site scripting

Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...

CVE-2018-16623

Kirby CMS version 2.5.12 (CVE-2018-16623) is described in the provided documents as prone to a Persistent XSS via the Title field in the admin panel's Site options dropdown. The issue is consistently reported across CVE records and vendor/third-party sources in the connected documents. The availa...

CVE-2018-16623

Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...

CVE-2018-16624

Kirby CMS – Kirby v2.5.12 is affected. The vulnerability is in panel/pages/home/edit where an XSS flaw can be triggered by the title of a newly created page. The available connected documents confirm the component/file (panel/pages/home/edit) and the impact (XSS). No explicit root cause or exploi...