CVE-2023-24689

The CVE-2023-24689 entry concerns mojoPortal

vulhub

This is a collection of vulnerable web applications and tools for testing and learning about web application security. The repository contains a variety of applications, including CouchDB, FFmpeg, Git, and Jenkins, each with its own set of vulnerabilities. The applications are designed to be used...

diagnostic.abwa.pk Cross Site Scripting vulnerability OBB-3185871

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip that stems from the ability to upload a file with an arbitrary Content-Type, whi...

101news By Mayuri K 1.0 SQL Injection Vulnerability

Title: 101news-by-Mayuri-K-1.0 Multiple-SQLi Author: nu11secur1ty Vendor: https://mayurik.com/ Software: https://mayurik.com/source-code/P4030/news-portal-project-in-php Reference: https://portswigger.net/web-security/sql-injection Description: The comment parameter appears to be vulnerable to SQ...

55web.jp Cross Site Scripting vulnerability OBB-3184093

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aspirenyproperties.webprojects-demo.com Cross Site Scripting vulnerability OBB-3182252

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kupka-stillfried.de Open Redirect vulnerability OBB-3180409

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

camaracariacica.es.gov.br Cross Site Scripting vulnerability OBB-3180162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Jellyfin Web Cross-Site Scripting (XSS) via Collection Name

In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim...

Moxa SDS-3008 Series Industrial Ethernet Switch web application cleartext transmission vulnerability

Talos Vulnerability Report TALOS-2022-1616 Moxa SDS-3008 Series Industrial Ethernet Switch web application cleartext transmission vulnerability February 2, 2023 CVE Number CVE-2022-40693 SUMMARY A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008...

PT-2023-16397 · Unknown · Projectsend

Name of the Vulnerable Software and Affected Versions: projectsend/projectsend versions prior to r1606 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository projectsend/projectsend. This type of attack involves injecting malicious scripts into...

CVE-2022-47003

Mura CMS before 10.0.580 is vulnerable to authentication bypass via the Remember Me feature. The weakness allows an attacker to bypass login through a crafted web request, enabling access to sensitive data and potential unauthorized actions on the affected site. Affected software: Mura CMS versio...

Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to cross-site scripting ( CVE-2022-46771 )

Summary IBM UrbanCode Deploy UCD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details...

wediation.nl Cross Site Scripting vulnerability OBB-3173328

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-46968

A stored cross-site scripting XSS vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages...

CVE-2022-48007

A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...

CVE-2022-48013

Opencats v0.9.7 contains a stored XSS vulnerability in the calendar component ( /opencats/index.php?m=calendar ). The underlying issue allows injecting payloads into the Description or Title fields, enabling execution of arbitrary web scripts or HTML by an attacker who can supply crafted input. C...

CVE-2022-46968

CVE-2022-46968 is a stored XSS vulnerability in Revenue Collection System v1.0, exploitable via /index.php?page=help where a crafted payload injected into sent messages allows arbitrary web scripts/HTML. Affected: Revenue Collection System v1.0 (component: /index.php?page=help). Impact per source...

fnr.de Cross Site Scripting vulnerability OBB-3169108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...