555 matches found
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
PT-2023-17414 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.3 Description: The issue is related to stored Cross-site Scripting XSS in the GitHub repository nilsteampassnet/teampass. Specifically, the description parameter of a folder is vulnerable. This allows an attacke...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in TeamPass 3.0.3 and earlier versions, which stems from the presence of a stored cross-site scripting XSS vulnerability...
CVE-2023-2021
CVE-2023-2021 concerns a stored Cross-site Scripting (XSS) vulnerability in TeamPass (nilsteampassnet/teampass) prior to version 3.0.3. The issue arises from unsanitized input in the folder description parameter, allowing injection of scripts that run in a victim’s browser when the affected conte...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
PT-2023-3088 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.9 Description: The issue is related to improper access control in the teampass password manager, which can be exploited by a remote attacker to disclose protected information. Recommendations: For versions prior...
Teampass SQL Injection vulnerability
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
GHSA-PPXM-Q2H4-V7MM Teampass SQL Injection vulnerability
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
Sql injection
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1545 SQL Injection in nilsteampassnet/teampass
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
TeamPass SQL注入漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A SQL injection vulnerability exists in versions prior to teampass 3.0.0.23, which stems from the presence of SQL injection...
CVE-2023-1545
CVE-2023-1545 affects Teampass (nilsteampassnet/teampass) prior to 3.0.0.23, where an SQL Injection vulnerability exists in the application flow described by public advisories. The connected documents provide concrete technical details: PoCs and public exploits exist for Teampass versions around ...
CVE-2023-1545 SQL Injection in nilsteampassnet/teampass
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
Improper Authorization in nilsteampassnet/teampass
Improper Authorization in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1463
Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1463 Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass
Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
TeamPass 授权问题漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A vulnerability exists in TeamPass versions prior to 3.0.0.23 for authorization issues. An attacker could exploit this vulnerability to bypass authorization by controlling keys...
PT-2023-17001 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.0.23 Description: The issue is related to improper authorization in the teampass GitHub repository. It allows for authorization bypass through a user-controlled key. There is no information provided about the...