reporter.akipress.org Cross Site Scripting vulnerability OBB-3949618

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-5296

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below Description The issue is related to the monitoring module of Zohocorp ManageEngine Exchange Reporter Plus, where the software fails to properly protect the SQL query structur...

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.65...

MAL-2024-6836 Malicious code in codestats_metrics-reporter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in codestats_metrics-reporter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2577 Malicious code in karma-console-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in karma-console-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2906 Malicious code in @tabby.ai/qaseio-playwright-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @tabby.ai/qaseio-playwright-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Google Introduces Project Naptime for AI-Powered Vulnerability Research

Google has developed a new framework called Project Naptime that it says enables a large language model LLM to carry out vulnerability research with an aim to improve automated discovery approaches. "The Naptime architecture is centered around the interaction between an AI agent and a target...

CVE-2024-37828

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

CVE-2024-37828

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

PT-2024-27770 · Vermeg · Vermeg Agilereporter

Name of the Vulnerable Software and Affected Versions: Vermeg Agile Reporter version 23.2.1 Description: The issue is a stored cross-site scripting XSS that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast...

CVE-2024-37828

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

CVE-2024-37828

Vermeg Agile Reporter version v23.2.1 is vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input within the Message field of the Set Broadcast Message module, which allows an attacker to inject a crafted payload to execute arbitrary web scrip...

CVE-2024-37828: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

VERMEG Agile Reporter Security Breach

VERMEG Agile Reporter is a hybrid of pre-packaged modules from VERMEG, Inc. A security vulnerability exists in VERMEG Agile Reporter version v23.2.1, which stems from the presence of stored cross-site scripting XSS that allows an attacker to inject a crafted payload to execute arbitrary web scrip...

CVE-2021-22508

A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web application...

CVE-2021-22508 Potential SQL injection in OpenText Operations Bridge Reporter

A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web application...

CVE-2021-22508 Potential SQL injection in OpenText Operations Bridge Reporter

A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web application...