EUVD-2023-50710

Malicious code in bioql PyPI...

EUVD-2023-50709

Malicious code in bioql PyPI...

CVE-2023-46503

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46503

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

CVE-2023-46503

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

Cross site scripting

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

Cross site scripting

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

CVE-2023-46504

CVE-2023-46504 affects PwnCYN YXBOOKCMS v1.0.2. A Cross Site Scripting (XSS) flaw exists in the library name function of the general settings component, enabling a physically proximate attacker to execute arbitrary code. The issue is confirmed across multiple sources (NVD/Red Hat/CNNVD/etc.) with...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46503: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

CVE-2023-46503

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

PT-2023-30063 · Unknown · Pwncyn Yxbookcms

Name of the Vulnerable Software and Affected Versions: PwnCYN YXBOOKCMS version 1.0.2 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via the library name function in the general settings component. This can be exploited by a physically proximate attacke...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46503

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules...

CVE-2023-46504: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46503

CVE-2023-46503 concerns PwnCYN YXBOOKCMS v1.0.2 with a Cross-Site Scripting (XSS) issue exploitable via the reader management and book input modules. The vulnerability is described as allowing a remote attacker to execute arbitrary code through these modules. CVSS‑3.1 metrics indicate a MEDIUM ba...