2062 matches found
CVE-2021-29434 Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could...
PT-2021-18210
Name of the Vulnerable Software and Affected Versions: Wagtail versions prior to 2.11.7 Wagtail versions prior to 2.12.4 Description: In affected versions of Wagtail, a Django content management system, the software does not apply server-side checks to ensure that link URLs use a valid protocol...
CVE-2021-29434: Improper Neutralization of Input During Web Page Generation
Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could...
CVE-2021-29054
Certain Papoo products are affected by: Cross Site Request Forgery CSRF in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges remote...
CVE-2021-29054
Certain Papoo products are affected by: Cross Site Request Forgery CSRF in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges remote...
CVE-2021-29054
Certain Papoo products are affected by: Cross Site Request Forgery CSRF in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges remote...
CVE-2021-29054
Certain Papoo products are affected by: Cross Site Request Forgery CSRF in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges remote...
CVE-2021-29054
CVE-2021-29054 affects Papoo CMS: CSRF in the admin interface. Affected products are Papoo CMS Light up to 21.02 and Papoo CMS Pro up to 6.0.1. The underlying issue is Cross Site Request Forgery in the administrative UI, with the published impact described as remote privilege gain. The connected ...
Papoo cms 跨站请求伪造漏洞
Papoo cms is an application from the German company Papoo. for modern portable SEO websites Papoo suffers from a cross-site request forgery vulnerability that originates from a cross-site request forgery in the administration interface, which can be used by an attacker to gain privileges. The...
PT-2021-18051
Name of the Vulnerable Software and Affected Versions: Papoo CMS Light versions through 21.02 Papoo CMS Pro versions through 6.0.1 Description: The issue is related to Cross Site Request Forgery CSRF in the admin interface, allowing for remote privilege gain. Recommendations: For Papoo CMS Light...
CVE-2021-29054: Cross-Site Request Forgery (CSRF)
Certain Papoo products are affected by: Cross Site Request Forgery CSRF in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges remote...
The vulnerability of the administration interface of the VMware Carbon Black Cloud Workload security platform allows a perpetrator to increase their privileges.
The vulnerability of the administration interface of the VMware Carbon Black Cloud Workload security platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
Pulse Secure VPN Arbitrary Command Execution
Exploit Title: Pulse Secure VPN - Arbitrary Command Execution Date: 05/04/2021 Exploit Author: Tobias Marcotto Tested on: Kali Linux x64 Version: 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-29030
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI...
Bitweaver 跨站脚本漏洞
Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/index.php URI...
Authentication bypass vulnerability found in NATO, EU approved firewall
By Waqas A threat actor with network access to an admin interface could easily exploit the vulnerability to become a root user without any login credentials. This is a post from HackRead.com Read the original post: Authentication bypass vulnerability found in NATO, EU approved firewall...
CVE-2021-21297
Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A badly formed request can modify the prototype of the default JavaScript Object with the potential to affect the default...