PT-2022-16659

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterTrack version 100.0.8019.14010 Description The issue is a Cross-site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...

PT-2022-13362

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

PT-2022-13227

Name of the Vulnerable Software and Affected Versions pimcore/pimcore versions prior to 10.3.1 Description The issue is related to Cross-site Scripting XSS - Stored, which allows an attacker to inject malicious scripts into a website. This can lead to unauthorized access to sensitive data or taki...

PT-2021-24302

Name of the Vulnerable Software and Affected Versions: Quectel UC20 UMTS/HSPA+ version 6.3.14 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorize...

PT-2021-23642

Name of the Vulnerable Software and Affected Versions Convos-Chat versions prior to 6.32 Description A Stored Cross Site Scripting XSS issue exists. This allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control of user sessions...

PT-2021-22269

Name of the Vulnerable Software and Affected Versions ocProducts Composr CMS versions prior to 10.0.38 Description The issue allows an attacker to inject JavaScript via Comcode, resulting in a cross-site scripting XSS attack. This can potentially lead to unauthorized access or control of user...

PT-2021-22270

Name of the Vulnerable Software and Affected Versions ocProducts Composr CMS versions prior to 10.0.38 Description The issue allows an attacker to inject JavaScript via the staff messaging messaging system, resulting in a cross-site scripting XSS attack. This can potentially lead to unauthorized...

TrendNet TW100-S4W1CA Cross-Site Request Forgery Vulnerability

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

Design/Logic Flaw

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

CVE-2021-32424

The CVE-2021-32424 entry concerns TrendNet TW100-S4W1CA router, version 2.3.32. The vulnerability is a CSRF-style flaw arising from insufficient session controls, allowing an attacker to induce unauthorized router changes through a specially crafted web page. If an authenticated user visits a mal...

TrendNet TW100-S4W1CA 跨站请求伪造漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

CVE-2019-3867

A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gain access to a session, could use it to control or delete a user's container repository. Mitigation Toggle FEATUREPERMANENTSESSIONS to False in quay.conf...

PT-2021-12114

Name of the Vulnerable Software and Affected Versions: Digital Experience versions 8.5 through 9.5 Description: The issue is related to a cross-site scripting XSS vulnerability in the WSRP consumer. This type of vulnerability allows attackers to inject malicious scripts into websites, potentially...

PT-2020-20450

Name of the Vulnerable Software and Affected Versions Jeedom versions prior to 4.0.39 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take control of...

User Registration And Login And User Management System 2.1 SQL Injection

Exploit Title: User Registration & Login and User Management System With admin panel - Authentication Bypass Date: 2020-07-04 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

PT-2020-13834

Name of the Vulnerable Software and Affected Versions Solarwinds Orion versions 2019.4.1 Description The issue allows for cross-site scripting XSS attacks. XSS is a type of attack where an attacker injects malicious code into a website, which is then executed by the user's browser. This can lead ...

PT-2020-9190

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN Center versions 10.2.x through 10.2.0 NetScaler SD-WAN Center versions 10.0.x through 10.0.6 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker injects malicious code into a...

PT-2019-15842

Name of the Vulnerable Software and Affected Versions SALTO ProAccess SPACE version 5.4.3.0 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

PT-2019-6510

Name of the Vulnerable Software and Affected Versions pixelpost versions 1.7.1 through 1.7.1-5 Description The issue is related to Cross-Site Scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially allowing them to ste...

PT-2019-6584

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...