CVE-2021-24657

creationtimestamp| type| source ---|---|--- 2021-09-20 14:26:58+00:00| seen| https://t.me/cibsecurity/29093 2025-12-12 08:35:51+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24657.yaml...

CVE-2021-24596

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users editors and admins to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Cross site scripting

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users editors and admins to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24596 youForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site Scripting

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users editors and admins to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-40438

creationtimestamp| type| source ---|---|--- 2021-09-16 18:22:49+00:00| seen| https://t.me/cibsecurity/28988 2021-10-14 13:22:35+00:00| published-proof-of-concept| https://t.me/cKure/7605 2021-10-15 13:16:10+00:00| published-proof-of-concept| https://t.me/ptswarm/82 2021-10-15 13:37:04+00:00| seen...

Atlassian Jira 代码注入漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage all kinds of issues and defects in the workplace. A code injection vulnerability exists in Jira Server or Data Center versions prior to 8.13.12, 8.14.0 to 8.19.1, which ca...

AntiVirus Evasion Techniques

Introduction Antivirus software looks for, detects, and eliminates viruses as well as other harmful software such as worms, trojans, adware, and others. Such programs are intended to be used as a preventative measure in cyber security, preventing threats from entering your computer and causing...

CVE-2021-24435

creationtimestamp| type| source ---|---|--- 2021-09-06 14:40:55+00:00| seen| https://t.me/cibsecurity/28288 2023-05-26 00:44:43+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24435.yaml...

CVE-2021-39322

creationtimestamp| type| source ---|---|--- 2021-09-02 20:36:31+00:00| seen| https://t.me/cibsecurity/28226 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39322.yaml...

GHSA-947X-PV47-PP3Q Cross-site scripting in pywb

Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped...

Cross-site scripting in pywb

Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped...

SUSE-SU-2021:2927-1 Security update for rubygem-addressable

This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates bsc1188207...

PT-2021-22030 · WordPress · The Gutenberg Template Library & Redux Framework

Name of the Vulnerable Software and Affected Versions: The Gutenberg Template Library & Redux Framework plugin versions prior to 4.2.12 Description: The issue concerns an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route. Specifically, t...

CVE-2021-39320

creationtimestamp| type| source ---|---|--- 2021-09-01 18:35:35+00:00| seen| https://t.me/cibsecurity/28172 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39320.yaml...

Cross-site Scripting (XSS) - Stored in yogeshojha/rengine

✍️ Description Hi, When creating a template for nuclei, it is possible to upload a malicious template with xss load, clicking to see this template will run xss. 🕵️‍♂️ Proof of Concept 1- First, create the fake template: id: poc-xss alert1 info: name: xss-storage-rengine author: phor3nsic severity:...

Cacti < 1.2.13 XSS Vulnerability - Windows

Cacti is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

[SECURITY] Fedora 33 Update: rubygem-addressable-2.7.0-5.fc33

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. It is flexible, offers heuristic parsing, and additionally provides extensive support for IRIs and URI templates...

CVE-2020-23226

Multiple Cross Site Scripting XSS vulneratiblities exist in Cacti 1.2.12 in 1 reportsadmin.php, 2 dataqueries.php, 3 datainput.php, 4 graphtemplates.php, 5 graphs.php, 6 reportsadmin.php, and 7 datainput.php...

DEBIAN-CVE-2020-23226

Multiple Cross Site Scripting XSS vulneratiblities exist in Cacti 1.2.12 in 1 reportsadmin.php, 2 dataqueries.php, 3 datainput.php, 4 graphtemplates.php, 5 graphs.php, 6 reportsadmin.php, and 7 datainput.php...

CVE-2021-39165

creationtimestamp| type| source ---|---|--- 2021-08-27 00:27:08+00:00| seen| https://t.me/cibsecurity/27932 2021-08-31 13:10:52+00:00| seen| https://t.me/CyberSecurityTechnologies/4194 2022-03-18 06:41:26+00:00| published-proof-of-concept| https://t.me/cKure/9068 2023-05-26 10:28:54+00:00|...