ABB CP400PB TextEditor Input Validation Vulnerability

ABB CP400PB is a set of HMI programming software from ABB Switzerland.TextEditor is one of the text editors. An input validation vulnerability exists in the file parser of TextEditor version 2.0 in ABB CP400PB 2.0.7.05 and earlier versions, which stems from the program failing to prevent the...

The vulnerability of the Word text editor, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Word text editor is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

TerraMaster TOS Cross-Site Scripting Vulnerability

TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization, etc. Text Editor is one of the text editor. A cross-site scripting vulnerability...

CVE-2018-13360

Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter...

CVE-2018-13360

Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter...

CVE-2018-13360

TerraMaster TOS 3.1.03 Text Editor is vulnerable to cross-site scripting via the filename URL parameter, enabling an attacker to inject and execute JavaScript. This is documented in CVE-2018-13360 and corroborated by CNVD/NVD entries and related OpenVAS data, all indicating the issue centers on t...

CVE-2018-13360: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter...

PT-2018-11781

Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue allows attackers to execute JavaScript via the filename URL parameter in the Text Editor, potentially leading to cross-site scripting. Recommendations For TerraMaster TOS version 3.1.03, avo...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-28241)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

CVE-2018-3132

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3132

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3132

The CVE-2018-3132 entry applies to the Rich Text Editor subcomponent of Oracle PeopleSoft Enterprise PeopleTools. Affected versions are 8.55 and 8.56. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, with user interaction required, to perform unauthorized u...

CVE-2018-3132: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2018-2355

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to a vulnerability in the Rich Text Editor component of Oracle PeopleSoft Products, which can be exploited by an unauthenticated...

EKFiddle v.0.8.2 - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...

CmsEasy Cross-Site Request Forgery Vulnerability

CmsEasy is a CMS Content Management System for creating responsive websites from China's Kyushu E-Tech. rich text editor is one of the rich text editors. A cross-site request forgery vulnerability exists in the rich text editor in CmsEasy version 6.120180508. The vulnerability can be exploited by...

CmsEasy Cross-Site Request Forgery Vulnerability (CNVD-2018-14725)

CmsEasy is a CMS Content Management System for creating responsive websites from China's Kyushu E-Tech. rich text editor is one of the rich text editors. A cross-site request forgery vulnerability exists in the rich text editor in CmsEasy version 6.120180508. A remote attacker can exploit this...

CVE-2018-11680

An issue was discovered in CmsEasy 6.120180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate...

CVE-2018-11680

An issue was discovered in CmsEasy 6.120180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate...

CVE-2018-11680: Cross-Site Request Forgery (CSRF)

An issue was discovered in CmsEasy 6.120180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate...