Lucene search
K

7 matches found

OSV
OSV
added 2024/03/06 11:10 a.m.19 views

BIT-TYPO3-2021-41113

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery. The impact is the same as...

8.8CVSS8.4AI score0.00619EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/11/24 12:0 a.m.4 views

PT-2023-30917 · Warpgate · Warpgate

Name of the Vulnerable Software and Affected Versions: Warpgate versions prior to 0.9.0 Description: Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions, there is a privilege escalation issue through a non-admin user's account. Limited users can impersonat...

8.8CVSS9AI score0.00676EPSS
Exploits0References5
Hacker One
Hacker One
added 2023/10/30 9:12 p.m.12 views

A.S. Watson Group : Access to internal info via Graphql on https://tng-api.watsons.com.my

Vulnerability description not provided...

7.1AI score
Exploits0
0day.today
0day.today
added 2022/11/16 12:0 a.m.201 views

Revenue Collection System 1.0 Cross Site Scripting / Authentication Bypass Exploit

Exploit Title: Revenue Collection System v1.0 - Authentication Bypass via Stored XSS Exploit Author: Joe Pollock Vendor Homepage: https://www.sourcecodester.com/php/14904/rates-system.html Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/rates.zip Tested on: Ka...

0.3AI score
Exploits0
Prion
Prion
added 2021/10/05 6:15 p.m.24 views

Cross site request forgery (csrf)

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery. The impact is the same as...

6.8CVSS8.5AI score0.00699EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/02/25 1:32 p.m.16 views

CVE-2021-3273

Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admin user account in Nagios XI's web system...

7.4AI score0.05631EPSS
Exploits1References2
CVE
CVE
added 2021/02/25 1:32 p.m.56 views

CVE-2021-3273

CVE-2021-3273 affects Nagios XI below 5.7. A code injection flaw exists in the /nagiosxi/admin/graphtemplates.php component due to insufficient input filtering. Exploitation requires an admin web UI account. The vulnerability impact is code execution with high severity; details across connected s...

9CVSS7.1AI score0.05631EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder