CVE-2026-24777

OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permission can lock and unlock users. This functionality should only be possible for users of the application, but they were not supposed to be able to lock application administrator...

PT-2026-7126

OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permission can lock and unlock users. This functionality should only be possible for users of the application, but they were not supposed to be able to lock application administrator...

EUVD-2024-42195

Malicious code in bioql PyPI...

CVE-2024-46542

Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks...

CVE-2024-46542

CVE-2024-46542 affects Veritas / Arctera Data Insight versions prior to 7.1.1. The root cause is improper neutralization of SQL commands, allowing Application Administrators to perform SQL injection. Impact described: potential information disclosure. Remediation: upgrade to 7.1.1 or later; as a ...

CVE-2024-46542

Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks...

CVE-2024-46542

Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks...

Cross site scripting

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

How I was in the Google collaboration community GWC found the reflection type, a storage type, the DOM type of vulnerability? - Vulnerability warning-the black bar safety net

! Google for Work Connect, the GWC is a System, Application Administrator, and partner community of system, but also in Google's vulnerability reward range. Shortly before, I was in the GWC community system found reflection type, a storage type, the DOM typeXSS. The storage typeXSS In the GWC...

ZenPhoto 1.4.0.3 x-forwarded-for HTTP Header presisitent XSS

No description provided by source. Exploit Title: ZenPhoto 1.4.0.3 patched 2011-4-19 x-forwarded-for HTTP Header presisitent XSS Date: 21-4-2011 Author: Saif El-Sherei Software Link: http://zenphoto.googlecode.com/files/zenphoto-1.4.0.3.zip Version: 1.4.0.3 latest updated 2011-4-19 Tested on:FF...