CVE-2024-2010

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS. This issue affects V5: before 6.2...

CVE-2024-2010 Reflected XSS in TE Informatics' V5 Software

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS. This issue affects V5: before 6.2...

CVE-2024-2010 Reflected XSS in TE Informatics' V5 Software

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS. This issue affects V5: before 6.2...

CVE-2024-2010

CVE-2024-2010 affects TE Informatics V5 (before 6.2). The vulnerability is an Improper Neutralization of Script-Related HTML Tags in a Web Page, leading to Reflected XSS. Root cause: improper neutralization of script-related HTML tags in the web page rendering. Impact per sources is an in-browser...

PT-2024-18587 · Unknown · Te Informatics V5

Name of the Vulnerable Software and Affected Versions: TE Informatics V5 versions before 6.2 Description: The issue is related to Improper Neutralization of Script-Related HTML Tags in a Web Page, which allows Reflected XSS. This can be exploited to execute malicious scripts on the victim's...

CVE-2024-2010: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS. This issue affects V5: before 6.2...

Traccar v5 Remote Code Execution (CVE-2024-31214 and CVE-2024-24809)

Remote Code Execution in Traccar v5.1 - v5.12. Remote code execution can be obtained by combining two vulnerabilities: A path traversal vulnerability CVE-2024-24809 and an unrestricted file upload vulnerability CVE-2024-31214. By default, the application allows self-registration, enabling any use...

CVE-2024-42081

In the Linux kernel, the following vulnerability has been resolved: drm/xe/xedevcoredump: Check NULL before assignments Assign 'xedevcoredumpsnapshot ' and 'xedevice ' only if 'coredump' is not NULL. v2 - Fix commit messages. v3 - Define variables before code.Ashutosh/Jose v4 - Drop return check...

[SECURITY] Fedora 39 Update: krb5-1.21.3-1.fc39

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Identifying Different License Types

This article describes how to identify different Citrix license types. To license a Citrix product, it requires a license code that must be activated or allocated and uploaded to the appropriate environment, such as the License Administration Console, the XenServer or an appliance. License Code...

PT-2024-27820

Name of the Vulnerable Software and Affected Versions Minder versions prior to v0.0.52 Description Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users' repositories using the github.com/go-git/go-git/v5 library...

[SECURITY] Fedora 40 Update: podman-tui-1.1.0-1.fc40

podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

Fedora: Security Advisory (FEDORA-2024-e383f723a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...

File Upload Vulnerability in Zhiyuan A6-V5 Collaboration Management Software (CNVD-2024-22457)

Zhiyuan A6-V5 collaborative management software is a set of new generation of large collaborative office management software that can help various enterprises and institutions, government agencies and social groups of single-type organizations to achieve batch delivery. A file upload vulnerabilit...

CVE-2024-25247

SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters...

Sql injection

SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters...

CVE-2024-25248

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

Sql injection

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

PT-2024-20842 · Unknown · Niushop B2B2C

Name of the Vulnerable Software and Affected Versions: Niushop B2B2C V5 affected versions not specified Description: The issue allows attackers to run arbitrary SQL commands via latitude and longitude parameters in the /app/api/controller/Store.php endpoint. This enables potential exploitation fo...