13572 matches found
Session cookie disclosure in the crawler
Date : 2024-04-09 CVE ID : CVE-2024-28235 If the crawler is set to crawl protected pages, it sends the cookie header to externals URLs. Affected versions Contao 4.0 Contao 4.1 Contao 4.2 Contao 4.3 Contao 4.4 Contao 4.5 Contao 4.6 Contao 4.7 Contao 4.8 Contao 4.9 Contao 4.10 Contao 4.11 Contao 4....
A vulnerability in the VMware SD-WAN Orchestrator management platform allows for the redirection of URLs to unreliable websites, enabling a hacker to redirect users to arbitrary URL addresses.
The vulnerability of the VMware SD-WAN Orchestrator management platform lies in the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...
Bannerlid <= 1.1.0 - Reflected XSS
Description The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators PoC Have an admin open URLs: -...
DerbyNet 9.0 render-document.php Cross Site Scripting
CVE ID: CVE-2024-30920 Description: A Cross Site Scripting XSS vulnerability has been identified in DerbyNet v9.0, specifically within the render-document.php component. This vulnerability allows a remote attacker to execute arbitrary code via crafted URLs. The root cause of the vulnerability is...
CVE-2024-31393
Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS 124...
Express.js Open Redirect in malformed URLs
...
rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755
A flaw was found in the rubygem URI. The URI parser mishandles invalid URLs that have specific characters, which causes an increase in execution time parsing strings to URI objects. This issue may result in a regular expression denial of service ReDoS...
Tenda FH1202 saveParentControlInfo method stack buffer overflow vulnerability
The Tenda FH1202 is a dual-band wireless router from the Tenda brand, designed for large homes, small offices, or business and leisure areas, and designed to provide stable wireless network coverage and high-speed transmission. The Tenda FH1202 suffers from a stack buffer overflow vulnerability...
BIT-ARTIFACTORY-2023-42662
JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration...
CVE-2024-30624
Tenda FH1205 v2.0.0.7775 has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function...
CVE-2024-30624
Tenda FH1205 v2.0.0.7775 has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function...
Server Side Request Forgery (SSRF)
gradio is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to the /proxy route allowing users to proxy arbitrary URLs include potentially internal endpoints. Attackers can proxy arbitrary URLs by exploiting this vulnerability...
CVE-2024-2280
The Better Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget link URL values in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
Open Redirect
express is vulnerable to Open Redirect. The vulnerability is due to improper handling of user-provided URLs during redirection in Express.js, which performs encoding using the encodeurl library before passing it to the 'location' header. It allows bypass of an improperly implemented allow lists a...
CVE-2024-30624
The CVE-2024-30624 entry applies to Tenda FH1205, version 2.0.0.7(775), with a stack overflow in the urls parameter of the saveParentControlInfo function. Red Hat/CVE, CNVD, CNNVD and other sources describe a buffer/stack overflow that can lead to arbitrary code execution or a denial of service. ...
PT-2024-23528 · Tenda · Tenda Fh1205
Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: The issue is a stack overflow vulnerability in the urls parameter from the saveParentControlInfo function. This vulnerability can be exploited, but details about the estimated number of potentially...
CVE-2024-30624
Tenda FH1205 v2.0.0.7775 has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function...
CVE-2024-30603
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function...