423 matches found
CVE-2023-50377
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...
CVE-2023-50377
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...
CVE-2023-50377
CVE-2023-50377 is a Stored XSS in AB-WP Simple Counter (affecting versions from n/a through 1.0.2) due to improper neutralization of input during web page generation; no remediation details are provided in the initial document.
ab-depannage-reims.com Improper Access Control vulnerability OBB-3791318
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ab-estudio.com.ar Cross Site Scripting vulnerability OBB-3719350
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37222
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
Cross site scripting
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
CVE-2023-37222
CVE-2023-37222 affects Farsight Tech Nordic AB ProVide 14.5. The vulnerability is multiple Cross-Site Scripting (CWE-79) in the web interface that can be exploited by a user with administrator privileges, with user interaction required. CVSS details from NVD indicate a low/moderate overall impact...
CVE-2023-37222 Farsight Tech Nordic AB ProVide
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
Buffer overflow
A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...
CVE-2023-34561
A vulnerability CVE-2023-34561 affects Geometry Dash v2.113 from RobTop Games AB. The issue is a buffer overflow in the level parsing code, enabling arbitrary code execution when a level is entered. The connected documents confirm the affected product/version and the underlying cause (buffer over...
ab-atelierdubois.fr Cross Site Scripting vulnerability OBB-3489556
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ab-ins-blaue.de Cross Site Scripting vulnerability OBB-3372899
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ab-dz.com Cross Site Scripting vulnerability OBB-3296126
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-1391
A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/ab.php. The manipulation of the argument img leads to unrestricted upload. It is possible to launch the attack remotely...
Malicious Package
Overview afisha-ab is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious code in afisha-ab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f6acfced06bb28f1da7e3cc51340285f7555996b5eedce681e7dc04612deb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-81 Malicious code in afisha-ab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f6acfced06bb28f1da7e3cc51340285f7555996b5eedce681e7dc04612deb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...