4227 matches found
PT-2024-17889 · Unknown · Antabot White-Jotter
Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue has been found in the Article Editor component, specifically in the /admin/content/editor file, affecting an unknown functionality. The manipulation of the articleCove...
CVE-2024-13032: Server-Side Request Forgery (SSRF)
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...
CVE-2024-13031: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...
CVE-2024-13022
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
CVE-2024-13022
CVE-2024-13022 affects taisan tarzan-cms 1.0.0, specifically the UploadResponse function in UploadController.java (Article Management). The vulnerability arises from manipulation of the file argument, enabling unrestricted uploads and allowing remote initiation. Multiple connected reports confirm...
CVE-2024-13022 taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
CVE-2024-13022 taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
PT-2024-17881 · Unknown · Taisan Tarzan-Cms
Name of the Vulnerable Software and Affected Versions: taisan tarzan-cms version 1.0.0 Description: A critical issue was found in the Article Management component, specifically affecting the UploadResponse function of the UploadController.java file. The manipulation of the file argument leads to...
CVE-2024-13022: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
CVE-2024-54774
Dcat Admin version v2.2.0-beta is vulnerable to a cross-site scripting (XSS) vulnerability within the /admin/articles/create endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data, which allows an attacker to execute arbitrary web scripts or HTML by injecti...
PT-2025-2018 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: Emlog Pro versions up to 2.4.3 Description: A problematic vulnerability was found in Emlog Pro, affecting an unknown section of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and potentially gain access to sensitive information in the victim's context. Successful...
2024-12 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5048654)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CVE-2024-53620
A cross-site scripting XSS vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
UBUNTU-CVE-2024-53620
A cross-site scripting XSS vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
SPIP 安全漏洞
SPIP is a free software for creating Internet sites from SPIP Open Source. A security vulnerability exists in SPIP v4.3.3, which originates from a cross-site scripting vulnerability in the Article module...
PT-2024-35795 · Spip · Spip
Name of the Vulnerable Software and Affected Versions: SPIP version 4.3.3 Description: A cross-site scripting XSS vulnerability in the Article module of SPIP allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter. This...
CVE-2024-53620
A cross-site scripting (XSS) vulnerability exists in the Article module of SPIP v4.3.3 . This flaw allows authenticated attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Title parameter , potentially enabling malicious code injection. While no official pat...
CVE-2024-53620: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
