146 matches found
HCL Domino Volt和HCL Domino Leap 安全漏洞
HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. HCL Domino Volt and HCL Domino Le...
PT-2025-18337 · Hcl · Domino Leap +1
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt and Domino Leap affected versions not specified Description: The issue allows client-side script injection in the authoring environment and deployed applications. This can be achieved through multiple vectors in HCL Domino Vol...
CVE-2024-30145: Improper Neutralization of Input During Web Page Generation
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications...
PT-2025-18330 · Hcl · Hcl Domino Volt
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt affected versions not specified Description: The issue concerns an unsafe default file type filter policy that allows the upload of .html files and the execution of unsafe JavaScript in deployed applications. This could...
HCL Domino Volt 安全漏洞
HCL Domino Volt is a low-code application development solution based on the Domino platform from HCL India. A security vulnerability exists in HCL Domino Volt, which stems from an insecure default file type filtering policy that could lead to the execution of malicious JavaScript...
HCL Domino Volt 安全漏洞
HCL Domino Volt is a low-code application development solution based on the Domino platform from HCL India. A security vulnerability exists in HCL Domino Volt, which stems from an insecure default file type filtering policy that could lead to the execution of malicious JavaScript...
CVE-2022-42450: Improper Neutralization of Input During Web Page Generation
Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications...
CVE-2022-42449: Unrestricted Upload of File with Dangerous Type
Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications...
PT-2025-18331 · Hcl · Hcl Domino Volt
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt affected versions not specified Description: The issue concerns an unsafe default file type filter policy that allows the upload of .html files, leading to the execution of unsafe JavaScript in deployed applications. This coul...
HCL Domino Volt 安全漏洞
HCL Domino Volt is a low-code application development solution based on the Domino platform from HCL India. A security vulnerability exists in HCL Domino Volt, which stems from improper cleaning of SVG files and could lead to client-side script injection...
CVE-2023-37535: Improper Neutralization of Input During Web Page Generation
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters...
CVE-2022-27562: Unrestricted Upload of File with Dangerous Type
Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications...
HCL Domino Volt和HCL Domino Leap 安全漏洞
HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. A security vulnerability exists i...
Chinese Volt Typhoon Hackers Infiltrated US Electric Utility for Nearly a Year
Dragos reveals Volt Typhoon hackers infiltrated a US electric utility for 300 days, collecting sensitive data. Learn how this cyberattack threatens infrastructure...
Remote Code Execution (RCE)
livewire/volt is vulnerable to Remote Code Execution RCE.The vulnerability is due to improper handling of user-crafted request payloads due to inadequate input validation, allowing attackers to execute arbitrary code within Volt components...
CVE-2025-27517
Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0...
CVE-2025-27517
Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0...
Volt Allows RCE Via User-Crafted Requests
Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components...
Improper Input Validation
Overview livewire/livewire is an A front-end framework for Laravel. Affected versions of this package are vulnerable to Improper Input Validation. An attacker can execute arbitrary code within Volt components by sending specially crafted payloads. Remediation Upgrade livewire/livewire to version...
