Lucene search
+L

11980 matches found

Cvelist
Cvelist
added 2022/02/15 6:27 p.m.49 views

CVE-2022-24589

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

6.1AI score0.00775EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/15 6:27 p.m.30 views

CVE-2022-24589

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

6.1AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/02/15 4:15 p.m.8 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS6.2AI score0.00624EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/15 4:15 p.m.19 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00624EPSS
SaveExploits1References2
Gitee
Gitee
added 2022/02/15 4:04 p.m.7 views

SpoolFool

This is a code analysis of the AddUser repository. Classification: Exploit module/toolkit targeting Windows systems. Primary CVE ID: Not explicitly stated, but the code appears to be related to the exploitation of a vulnerability in the Windows NetAPI32 library. Target product/service: Windows...

7.7AI score
SaveExploits0
Cvelist
Cvelist
added 2022/02/15 3:45 p.m.30 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.5AI score0.00624EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/15 3:45 p.m.18 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.9AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/02/15 1:15 p.m.7 views

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

8.8CVSS7.3AI score0.00543EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/15 11:15 a.m.14 views

CVE-2021-46558

Multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the username and password fields...

5.4CVSS6.2AI score0.00562EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/15 11:15 a.m.10 views

CVE-2021-46558

Multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the username and password fields...

5.4CVSS6AI score0.00562EPSS
SaveExploits1References2
NVD
NVD
added 2022/02/15 11:15 a.m.30 views

CVE-2021-46558

Multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the username and password fields...

5.4CVSS0.00562EPSS
SaveExploits1References1
Prion
Prion
added 2022/02/15 11:15 a.m.25 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the username and password fields...

3.5CVSS5.5AI score0.00562EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/15 10:28 a.m.40 views

CVE-2021-46558

Multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the username and password fields...

5.8AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/15 12:00 a.m.14 views

Issabel PBX 跨站脚本漏洞

Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A security vulnerability exists in Issabel PBX that stems from multiple cross-site scripting XSS vulnerabilities in the Add User module of Issabel PBX 2020010...

5.4CVSS5.8AI score0.00562EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
added 2022/02/15 12:00 a.m.107 views

February 15, 2022—KB5010427 (OS Build 17763.2628) Preview

None None...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/02/15 12:00 a.m.11 views

PT-2022-7429 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mctp route input function in the Linux kernel's implementation of the Management Component Transport Protocol MCTP. It involves the reuse of previously free...

7.8CVSS6.4AI score0.00302EPSS
SaveExploits0References13
zdt
zdt
added 2022/02/11 12:00 a.m.304 views

Subrion CMS 4.2.1 - Cross Site Request Forgery (Add Admin) Vulnerability

Exploit Title: Subrion CMS 4.2.1 - Cross Site Request Forgery CSRF Add Amin Exploit Author: Aryan Chehreghani Vendor Homepage: https://subrion.org Software Link: https://subrion.org/download Version: 4.2.1 Tested on: Windows 10 About - Subrion CMS : Subrion is a PHP/MySQL based CMS & framework,...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2022/02/11 12:00 a.m.376 views

Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin)

Exploit Title: Subrion CMS 4.2.1 - Cross Site Request Forgery CSRF Add Amin Date: 2022-02-09 Exploit Author: Aryan Chehreghani Vendor Homepage: https://subrion.org Software Link: https://subrion.org/download Version: 4.2.1 Tested on: Windows 10 About - Subrion CMS : Subrion is a PHP/MySQL based C...

5.3AI score
SaveExploits0
OSV
OSV
added 2022/02/10 11:47 p.m.22 views

GHSA-H9V8-RM3M-5H5F OS Command Injection in git-add-remote

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

9.8CVSS6.2AI score0.04221EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/02/10 11:47 p.m.49 views

OS Command Injection in git-add-remote

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

9.8CVSS9.3AI score0.04221EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder