3697 matches found
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...
AuraBorealisApp - Do You Know What's In Your Python Packages? A Tool For Visualizing Python Package Registry Security Audit Data
AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis designed for large scale security auditing of Python packages. The...
Using AI to Scale Spear Phishing
The problem with spear phishing is that it takes time and creativity to create individualized enticing phishing emails. Researchers are using GPT-3 to attempt to solve that problem: The researchers used OpenAIs GPT-3 platform in conjunction with other AI-as-a-service products focused on personali...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
Cross site scripting
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
UBUNTU-CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
CVE-2021-38602 concerns PluXML 5.8.7, where Article Editing via Headline or Content allows stored XSS. The cited description explicitly states a stored XSS in PluXML 5.8.7, and the connected documents reinforce that this is tied to the same vulnerability tracked across multiple sources. The CVE r...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
Removed by vendor...
PluXml 跨站脚本漏洞
PluXml is a free and open source content management system that does not require a database to work. A cross-site scripting vulnerability exists in PluXML, which stems from a stored XSS vulnerability that the Article Editing feature of PluXML 5.8.7 allows to be implemented via headers or content...
2021-08 Dynamic Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5005033)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2021-08 Dynamic Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5005033)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
CMS Made Simple < 2.2.15 XSS Vulnerability (Jul 2021)
CMS Made Simple is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
5 Themes for Product Security and Fostering Organizational Growth
In this article we would like to review what Raj Umadas, Product Security Manager at Compass, has shared during our recent webinar highlighting recurring themes that have led to impactful collaborations and organizational risk reduction. Product security ProdSec is crucial in the process of growi...
CVE-2021-33336
Cross-site scripting XSS vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3, and Liferay DXP 7.1 fix pack 18, and 7.2 fix pack 5 through 7, allows remote attackers to inject arbitrary web script or HTML via the comliferayjournalwebportletJournalPortletnam...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-57426)
CMS Made Simple is a simple and easy-to-use content management system developed using PHP, MySQL, and Smarty template engine. version 2.2.14 of CMS Made Simple contains a cross-site scripting vulnerability. The vulnerability can be exploited by attackers via the "Extra" function in the "News...