16297 matches found
Cross-site Scripting (XSS)
Apache JSPWiki is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization on the user preference page via the UserName variable...
CVE-2022-24572: Improper Neutralization of Input During Web Page Generation
Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...
PT-2022-16726
Name of the Vulnerable Software and Affected Versions Car Driving School Management System version 1.0 Description The issue concerns Cross Site Scripting XSS in the User Enrollment Form, specifically the Username Field. To exploit this, an admin must view the registered user details...
PT-2022-13144
Name of the Vulnerable Software and Affected Versions Crazy Bone WordPress plugin versions prior to 0.6.1 Description The issue arises from the lack of sanitization and escaping of the username submitted via the login form when displaying it back in the log dashboard. This leads to an...
CVE-2022-22908
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...
CVE-2022-22908
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...
CVE-2022-22908
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...
CVE-2022-22908
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...
PT-2022-15728
Name of the Vulnerable Software and Affected Versions Sangfor VDI Client version 5.4.2.1006 Description The issue allows attackers to discover the contents of the Username and Password fields when they are able to read process memory. This occurs due to a problem in the SangforCSClient.exe...
Sangfor VDI Client security vulnerabilities
Sangfor VDI Client is a tool used by Sangfor to quickly build virtual desktops.A security vulnerability exists in Sangfor VDI Client, which can be exploited by attackers to discover the contents of username and password fields when reading process memory...
PYSEC-2022-35
Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed i...
Weblate cross-site scripting vulnerabilities
A cross-site scripting vulnerability exists in Weblate, a Copyleft web-based free software continuous localization system, which stems from the failure of versions prior to 4.11 to properly neutralize user input used in the username and language fields. As a result of this improper neutralization...
Cerebrate has an unspecified vulnerability (CNVD-2022-77057)
Cerebrate is an open source platform. Designed to act as an interconnected orchestrator for trusted contact information providers and other security tools, a security vulnerability exists in Cerebrate 1.4, which stems from the possibility of username enumeration. No detailed vulnerability details...
PT-2022-16768
Name of the Vulnerable Software and Affected Versions FileCloud versions prior to 21.3 Description The issue allows for user enumeration. It exists in the path parameter when passing /SHARED/. A malicious actor could identify the existence of users by requesting share information on specified sha...
CVE-2021-25058 The Buffer Button <= 1.0 - Authenticated Stored Cross Site Scripting (XSS)
The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting XSS within the Twitter username to mention text field...
PT-2022-9614
Name of the Vulnerable Software and Affected Versions Buffer Button WordPress plugin version 1.0 Description The issue allows for Authenticated Stored Cross Site Scripting XSS within the Twitter username to mention text field. Recommendations For Buffer Button WordPress plugin version 1.0, update...
CVE-2021-25058: Improper Neutralization of Input During Web Page Generation
The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting XSS within the Twitter username to mention text field...
WordPress plugin Buffer Button has a cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Buffer Button prior to version 1.0, which...
Insertion of Sensitive Information Into Debugging Code
Description Laravel debug mode exposes sensitive data, eg: internal source codes, stack traces, sql queries, databases names, tables names, user's cookies, email, phone number, username, laravel version, php version, etc Proof of Concept 1. Login into http://demo.microweber.org 2. Navigate to thi...