Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

Description CSRF in deleting invoice templates Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking admin user to delete invoice templates...

Over 1 Million Sites Impacted by Vulnerability in Starter Templates Plugin

On October 4, 2021, the Wordfence Threat Intelligence team initiated the responsible disclosure process for the Starter Templates plugin, which is installed on over 1 Million WordPress websites. The full name of the WordPress plugin is “Starter Templates — Elementor, Gutenberg & Beaver Builder...

Mozilla Firefox Security Advisory (MFSA2013-102) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

WordPress Starter Templates plugin <= 2.7.0 - Authenticated Block Import leading to Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Block Import leading to Stored Cross-Site Scripting XSS vulnerability discovered by Ramuel Gall in WordPress Starter Templates plugin versions = 2.7.0. Solution Update the WordPress Starter Templates plugin to the latest available version at least 2.7.1...

FormatFuzzer - A Framework For High-Efficiency, High-Quality Generation And Parsing Of Binary Inputs

FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs. It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format. From a binary template for GIF, for instance,...

CVE-2021-41372

A Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exists when Power BI Report Server Template file pbix containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to...

ALBA-2021:4278 lorax-templates-rhel bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

lorax-templates-rhel bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

lorax-templates-Rocky Linux bug fix and enhancement update

An update is available for lorax-templates-rhel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

nuclei-templates

This repository is an offensive tool for nuclei templates, which are used to find security vulnerabilities in applications. The primary CVE ID present in the context is not explicitly mentioned, but the repository contains a workflow for CVE annotation. The target product/service or framework is...

Certipy - Python Implementation For Active Directory Certificate Abuse

Certipy is a Python tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. Based on the C variant Certify from @harmj0y and @tifkin. Installation $ python3 setup.py install Remember to add the Python scripts directory to your path. Usage $ certipy -h usage:...

Insightly: Stored XSS via LINK Name.

The LINK NAME was not properly escaped at the Templates page, leading to Stored XSS. The name was reflected in the tag, and due to lack of sanitization, the user could break out of the tag and execute the XSS...

Facebook to end facial recognition and delete billions of records

By Deeba Ahmed Facebook has announced that it will shut down its Facial Recognition System and delete the templates of over 1 billion people stored by this feature. This is a post from HackRead.com Read the original post: Facebook to end facial recognition and delete billions of records...

CVE-2021-31682

creationtimestamp| type| source ---|---|--- 2021-10-22 16:39:20+00:00| seen| https://t.me/cibsecurity/31022 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31682.yaml 2026-09-01 20:02:11+00:00| seen|...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Portainer contains an XSS vulnerability in Custom Templates via the node input box that affects versions before 2.9.1. The CVSS2/3.1 scores indicate MEDIUM risk with network access and no authentication required, but user interaction is not required under CVSSv2 and is required under CVSSv3.1, wi...

CVE-2021-42566

creationtimestamp| type| source ---|---|--- 2021-10-18 12:36:46+00:00| seen| https://t.me/cibsecurity/30674 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42566.yaml...