PT-2021-23023

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability in the templates/installer/step-004.inc.php file. This allows remote attackers to inject arbitrary web script or HTML via the firstname paramete...

CVE-2021-40970: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter...

PT-2021-23025

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability in the templates/installer/step-004.inc.php file. This allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2021-40968: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

CVE-2021-40972: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...

PT-2021-23027

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the mail parameter in the...

PT-2021-23022

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter in the templates/installer/step-004.inc.php file. This enables cross-site scripting XSS attack...

PT-2021-23026

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter in the...

CVE-2021-40969: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...

CVE-2021-40971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter...

CVE-2021-40973: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter...

PT-2021-23028

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the lastname parameter in the...

CVE-2021-22946: Missing Cryptographic Step

A user can tell curl = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server --ssl-reqd on the command line orCURLOPTUSESSL set to CURLUSESSLCONTROL or CURLUSESSLALL withlibcurl. This requirement could be bypassed if the server would return a...

Backdrop CMS 1.20.0 Cross Site Request Forgery / Command Execution

Exploit Title: Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery CSRF Exploit Author: V1n1v131r4 Date: 2021-09-22 Vendor Homepage: https://backdropcms.org/ Software Link: https://github.com/backdrop/backdrop/releases/download/1.20.0/backdrop.zip Version: 1.20.0 Tested On: Kali Linux,...

CVE-2021-40867

Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in e.g., behind the same NAT device, or already in possession of a foothold on an admin'...

CVE-2021-40867

Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in e.g., behind the same NAT device, or already in possession of a foothold on an admin'...

Race condition

Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in e.g., behind the same NAT device, or already in possession of a foothold on an admin'...

The vulnerability of the ptp4l software service, which is used to implement the PTP protocol for LinuxPTP, allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the ptp4l software service for implementing the LinuxPTP timing protocol is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause an application to terminate abnormally by creating a one-step...

Single-step process for critical admin transfer is risky

Handle 0xRajeev Vulnerability details Impact LongShort and Staker contracts have the notion of an “admin” address that is used within onlyAdmin or adminOnly modifiers for granting authorization to critical functions. Such contracts use a single-step ownership transfer of such admin addresses usin...

Spotting brand impersonation with Swin transformers and Siamese neural networks

Every day, Microsoft Defender for Office 365 encounters millions of brand impersonation emails. Our security solutions use multiple detection and prevention techniques to help users avoid divulging sensitive information to phishers as attackers continue refining their impersonation tricks. In thi...