15857 matches found
Cross site scripting
A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...
CVE-2020-25879: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...
PT-2021-11199
Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting issue in the 'Manage Users' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Username parameter...
Cisco Integrated Management Controller Username Enumeration (cisco-sa-cimc-enum-CyheP3B7)
According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability due to differences in authentication responses sent back from the application as part of an authentication attempt. An unauthenticated, remote attacker can exploit this, by by sending...
CVE-2021-32514
creationtimestamp| type| source ---|---|--- 2021-07-07 18:37:50+00:00| seen| https://t.me/cibsecurity/25973...
CVE-2021-22231
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username...
CVE-2021-22231
Removed by vendor...
CVE-2021-22231: Undefined Security Weakness
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username...
PT-2021-6698 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.0 and later Description: The issue is related to incorrect handling of the username variable, allowing a remote attacker to cause a denial of service. This can lead to the rejection of access to a user's profile page v...
MediaWiki 安全漏洞
MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. MediaWiki 1.36 suffers from a security vulnerability that stems from an issue discovered in the CentralAut...
ZrLog Cross-Site Scripting Vulnerability (CNVD-2021-46876)
ZrLog is a blog/CMS program developed in Java that is minimalist, easy to use, componentized, and has a low memory footprint. A cross-site scripting vulnerability exists in ZrLog version 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the userName and email...
Doctors Patients Management System 1.0 SQL Injection
Exploit Title: Doctors Patients Management System 1.0 - SQL Injection Authentication Bypass Date: 06/30/2021 Exploit Author: Murat DEMIRCI butterflyhunt3r Vendor Homepage: https://www.codester.com/ Software Link: https://www.codester.com/items/31349/medisol-doctors-patients-managment-system...
UserSpice Username Enumeration
A vulnerability exists in userSpice. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
CVE-2020-18066
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
PT-2021-10123
Name of the Vulnerable Software and Affected Versions: ZrLog version 2.1.0 Description: A Cross Site Scripting issue exists, allowing potential exploitation through the userName and email parameters in the "post/addComment" endpoint. Recommendations: For ZrLog version 2.1.0, consider restricting...
ZrLog 跨站脚本漏洞
ZrLog is a blog/CMS program developed in Java that is minimalist, easy to use, componentized, and has a low memory footprint. A cross-site scripting vulnerability exists in ZrLog version 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the userName and email...
CVE-2020-18066: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the 1 userName and 2 email parameters in post/addComment...
PT-2021-20184
Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A remote code execution issue exists in the configuration parsing functionality of the iw webs due to an error message buffer overflow. This can be triggered by a...
Weidmueller Industrial WLAN 安全漏洞
Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A remote code execution vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted username entry that could lead to an error message buffer overflow that could be exploited...
