UBUNTU-CVE-2023-2015

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A reflected XSS was possible when creating new abuse reports which allows attackers to perform...

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE, which stems from a possible...

The vulnerability in the web interface of the software for creating Cisco Unified Intelligence Center reports allows a perpetrator to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Unified Intelligence Center software for creating reports exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Aethon TUG Home Base Server 跨站脚本漏洞

Aethon TUG Home Base Server is a robotics server from Aethon, Inc. It is used to control and communicate with autonomous mobile robots. Aethon TUG Home Base Server has a cross-site scripting vulnerability that originates when creating or editing a new report, the Reports tab of the Fleet Manageme...

CVE-2022-25220

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding...

PeTeReport 跨站脚本漏洞

PeTeReport is an open source application vulnerability reporting tool. Designed to assist penetration testing/red team efforts by simplifying the task of report writing and generation, PeTeReport version 0.5 contains a cross-site scripting vulnerability that stems from the software's lack of...

CVE-2021-4035 Wocu Monitoring stored Cross-Site Scripting (XSS)

A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an account with enough privileges to view and edit reports...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability of the Zabbix universal monitoring system, related to bypassing authentication by using a user-controlled key, allows a intruder to circumvent the login page and gain access to the dashboard page.

The vulnerability of the Zabbix universal monitoring system relates to bypassing authentication by using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to bypass the login page, gain access to the dashboard, and then create a monitoring panel, report, screen,...

CVE-2017-17677

BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code...

PT-2021-8569

Name of the Vulnerable Software and Affected Versions BMC Remedy version 9.1SP3 Description The issue allows authenticated code execution. Authenticated users with the right to create reports can utilize BIRT templates to execute code. Recommendations For BMC Remedy version 9.1SP3, consider...

CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

CVE-2020-12109

creationtimestamp| type| source ---|---|--- 2020-09-18 14:58:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tplinkncxxxbonjourcommandinjection.rb 2024-11-14 06:07:14+00:00| seen| MISP/31e52c3d-a86d-4dbc-b75d-9d1508fba5b9 2025-02-06...

CVE-2019-8449

creationtimestamp| type| source ---|---|--- 2020-02-04 12:59:56+00:00| published-proof-of-concept| https://t.me/antichat/7801 2023-11-17 06:35:52+00:00| seen| https://t.me/arpsyndicate/223 2024-03-18 07:23:33+00:00| published-proof-of-concept| https://t.me/lostsec/164 2024-10-09 19:49:41+00:00|...

DEBIAN-CVE-2019-17382

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password i.e., anonymously. All created elements...

CVE-2018-3948

creationtimestamp| type| source ---|---|--- 2018-11-21 17:54:32+00:00| seen| MISP/5bf59afb-1fb8-4a70-991c-75ea0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...