Cross site scripting

Razor v0.8.0 was discovered to contain a cross-site scripting XSS vulnerability via the function uploadchannel...

CVE-2022-36747

Razor v0.8.0 contains a cross-site scripting (XSS) vulnerability in the uploadchannel() function (CVE-2022-36747). The issue affects Razor version 0.8.0 and is caused by insecure handling in the uploadchannel() path, enabling attacker-controlled input to be reflected in the web context. Public re...

CVE-2022-36747

Razor v0.8.0 was discovered to contain a cross-site scripting XSS vulnerability via the function uploadchannel...

CVE-2022-36747

Razor v0.8.0 was discovered to contain a cross-site scripting XSS vulnerability via the function uploadchannel...

CVE-2022-36747

Razor v0.8.0 was discovered to contain a cross-site scripting XSS vulnerability via the function uploadchannel...

CVE-2022-36747: Improper Neutralization of Input During Web Page Generation

Razor v0.8.0 was discovered to contain a cross-site scripting XSS vulnerability via the function uploadchannel...

PT-2022-23600 · Razor · Razor

Name of the Vulnerable Software and Affected Versions: Razor version 0.8.0 Description: The issue is related to a cross-site scripting XSS vulnerability. It affects the uploadchannel function, allowing for potential exploitation. Recommendations: For Razor version 0.8.0, consider disabling the...

Razor 跨站脚本漏洞

Razor is a powerful open source mobile analytics system open-sourced by Cobub in China. A security vulnerability exists in Razor version v0.8.0, which originated from the discovery of a cross-site scripting XSS vulnerability via the function uploadchannel...

CVE-2021-44226

Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there...

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

Denial of Service Vulnerability in Razor Sports App

ThunderSpeed Sports APP client provides accurate tournament information, live scores, live animation, tournament data analysis, tournament information and other services for soccer, basketball, tennis and e-sports enthusiasts. There is a denial-of-service vulnerability in RazorSports APP, which c...

Privilege escalation

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...

CVE-2019-10276

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...

CVE-2019-10276

CVE-2019-10276 affects Western Bridge Cobub Razor 0.8.0. The vulnerability is a file upload issue reachable via the URI web/assets/swf/uploadify.php; demonstration involves uploading a PHP file served with the image/jpeg content type. The connected records confirm the affected product and the upl...

CVE-2019-10276

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...

CVE-2019-10276: Unrestricted Upload of File with Dangerous Type

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...

PT-2019-11678

Name of the Vulnerable Software and Affected Versions Western Bridge Cobub Razor version 0.8.0 Description The issue concerns a file upload vulnerability. This vulnerability can be exploited via the "web/assets/swf/uploadify.php" URI. An example of exploitation involves uploading a .php file with...

CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

Puppet Enterprise, razor-server and pe-razor-server pre-installation vulnerabilities

Puppet Enterprise, razor-server, and pe-razor-server are products of Puppet Labs, Inc. Puppet Enterprise is a set of configuration management tools based on a client/server C/S architecture. razor-server and pe-razor-server are advanced configuration applications for deploying bare metal and...

CVE-2018-6512

The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet Enterprise: 2018.1.x versions prior to 2018.1.1 and razor-server and pe-razor-server prior to 1.9.0.0...