Design/Logic Flaw

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CKEditor 5 35.4.0 - Cross-Site Scripting Vulnerability

Exploit Title: CKEditor 5 35.4.0 - Cross-Site Scripting XSS Exploit Author: Manish Pathak Vendor Homepage: https://cksource.com/ Software Link: https://ckeditor.com/ckeditor-5/download/ Version: 35.4.0 Tested on: Linux / Web CVE : CVE-2022-48110 CKSource CKEditor5 35.4.0 was discovered to contain...

CVE-2023-1758 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

PT-2023-17307 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to stored Cross-site Scripting XSS due to the failure to sanitize user input in the updatecategory parameter. This allows for the storage of malicious scripts that c...

CVE-2023-27488

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when failuremodeallow: true is configured for extauthz filter. For affected components that are used for loggin...

Reflected XSS in /library/custom_template/share_template.php

Description There exist a reflected XSS in /library/customtemplate/sharetemplate.php in the 'listid' parameter. Proof of Concept http://openemr.local/library/customtemplate/sharetemplate.php?listid=1;alert1;function%20xif1a=a:a:1 fix properly sanitize the listid parameter...

iBooking v1.0.8 - Arbitrary File Upload

Exploit Title: iBooking v1.0.8 - Arbitrary File Upload Exploit Author: d1z1n370/oPty Date: 01/11/2022 Vendor Homepage: https://codecanyon.net/item/ibooking-laravel-booking-system/30362088 Tested on: Linux Version: 1.0.8 Exploit Description: The application is prone to an arbitrary file-upload...

PT-2023-7467

Name of the Vulnerable Software and Affected Versions Apache Airflow Drill Provider versions prior to 2.3.2 Description The issue is related to improper input validation in the Apache Airflow Drill Provider. This can allow a remote attacker to impact the confidentiality of protected information...

CVE-2022-48345

A flaw was found in sanitize-url. It does not correctly sanitize with colons, possibly leading to a Cross-site scripting risk...

Cross-site Scripting (XSS)

@braintree/sanitize-url is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the decodeHtmlCharacters function in index.ts does not properly sanitize html encoded colons in the urlSchemeRegex parameter, which allows an attacker to inject and execute malicious JavaScript by...

Sql injection

Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leading to a Denial of Service. If the user selects in user preferences the "Recently Visited Packages" view for the index page, the value of the searchhistory cookie is used as a...

@braintree/sanitize-url Cross-site Scripting vulnerability

sanitize-url aka @braintree/sanitize-url before 6.0.1 allows XSS via HTML entities...

@apa512/stream-chat-react (>=0.0.0-development, <=0.0.5), @brail/web (>=0.2.0-alpha.10, <=0.3.1-canary.1) +38 more potentially affected by CVE-2022-48345 via @braintree/sanitize-url (6.0.0)

@braintree/sanitize-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @braintree/sanitize-url and may be impacted: - @apa512/stream-chat-react =0.0.0-development, =0.2.0-alpha.10, =1.0.0, =0.3.0, =8.4.7, =0.1.10, =8.4.7, =8.4.7,...

GHSA-Q8GG-VJ6M-HGMJ @braintree/sanitize-url Cross-site Scripting vulnerability

sanitize-url aka @braintree/sanitize-url before 6.0.1 allows XSS via HTML entities...

CVE-2022-48345

sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...

DEBIAN-CVE-2022-48345

sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...

CVE-2022-48345

sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...

Design/Logic Flaw

sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...

UBUNTU-CVE-2022-48345

sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...

Cross-Site Scripting (XSS)

@toast-ui/chart is vulnerable to Cross-Site Scripting XSS. The vulnerability exists because the renderTooltip function in tooltip.ts does not properly sanitize the legend fields which allows an attacker to inject and execute arbitrary JavaScript into the browser...