CVE-2022-1433

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS...

CVE-2022-1433

Removed by vendor...

Nxp Semiconductors Nxp Lpc55S69 安全漏洞

The Nxp Semiconductors Nxp Lpc55S69 is a development board from Nxp Semiconductors, Netherlands. It is used to add off-the-shelf add-on boards for networking, sensors, displays and other interfaces. A security vulnerability exists in the Nxp Semiconductors Nxp Lpc55S69, which originates from a...

Shopware 5.2.5/5.3 - Cross-Site Scripting

Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1922 Shopware Security Tracking ID: SW-19834 Security Update:...

Shopware 5.2.5 / 5.3 Cross Site Scripting

Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1922 Shopware Security Tracking ID: SW-19834 Security Update:...

CVE-2017-15374

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

Cross site scripting

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374

Shopware 5.2.5–5.3 contains a persistent cross-site scripting (XSS) vulnerability in the backend CMS modules for customer and order handling. The flaw allows injection of script into firstname/lastname/order fields, triggering execution in the admin backend preview of customers or orders. Exploit...

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities

Document Title: =============== AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=963 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 9...

rdtax.myeg.com.my Cross Site Scripting

Exploit Title: rdtax.myeg.com.my XSS Vulnerability Date: 27/07/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps Security:RISK: normal Vendor or Software Link: Google dork: - Tested on: Linux Exploit/p0c : http://localhost:80/path/path/chooseIns.jsp?agent= Proof...

Europcar.bg Cross Site Scripting

Exploit Title: Europcar.bg "3 OR "alertdocument.cookie Dem0 : http://www.europcar.bg/cgi-bin/feedback.cgi?LANG=xss FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4 Crew,C4,T3D Hackers, Antuwebhunter = Sbkiller...

Europcarug.com Cross Site Scripting

Exploit Title: Europcarug.com "3 OR "alertdocument.cookie Dem0 : http://www.europcarug.com/cgi-bin/feedback.cgi?LANG=xss FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4 Crew,C4,T3D Hackers, Antuwebhunter = Sbkille...

Scully.cfa.harvard.edu Cross Site Scripting

Exploit Title: Scully.cfa.harvard.edu Minor Planet Center "3 OR "alertdocument.cookie Dem0 : http://scully.cfa.harvard.edu/cgi-bin/feedback.cgi?U=xss FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4 Crew,C4,T3D...

FeedBack Form [feedback.cgi] <= XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: FeedBack Form feedback.cgi "3 OR "alertdocument.cookie Dem0 : http://scully.cfa.harvard.edu/cgi-bin/feedback.cgi?U=xss http://www.europcar.bg/cgi-bin/feedback.cgi?LANG=xss http://www.europcarug.com/cgi-bin/feedback.cgi?LANG=xss ...