CVE-2024-28229

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

PT-2024-2107 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to insufficient authorization mechanisms in JetBrains YouTrack, allowing a remote attacker to bypass existing security restrictions. This could enable a user...

Phishing Attack

phpmyfaq/phpmyfaq is vulnerability to a Phishing Attack. The vulnerability is due the functionality to share articles. This vulnerability allows an unauthenticated attacker to utilize the target application's email server to send thousands of phishing messages because the backend email address...

CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

PT-2024-19485 · Lightcms · Lightcms

Name of the Vulnerable Software and Affected Versions: LightCMS version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Content Management - Articles field. Recommendations: For version 2.0, update to a newer version that contains a fix for this issue, if available. If no...

Jianhua Sun LightCMS Cross-Site Scripting Vulnerability

Jianhua Sun LightCMS is Jianhua Sun open source an application . Provides a lightweight CMS system , can also be used as a general-purpose back-end management framework . Jianhua Sun LightCMS v2.0 version of a cross-site scripting vulnerability , the vulnerability stems from the Management -...

CVE-2024-22559

CVE-2024-22559 affects LightCMS v2.0 with a Cross Site Scripting (XSS) vulnerability in the Content Management – Articles field. The CVSSv3.1 base score is 5.4 (Medium) with Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: Required, Scope: Changed, and imp...

GetSimple CMS 跨站脚本漏洞

GetSimple CMS is a content management system CMS written in PHP. A cross-site scripting vulnerability exists in GetSimple CMS version 3.3.16, which stems from the lack of effective filtering and escaping of user-supplied data when adding articles to the /admin/edit.php page, and can be exploited ...

The top 10 AI security articles you must read in 2024

We've curated a collection of 10 AI security articles that cover novel threats to AI models as well as strategies for developers to safeguard their models...

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

PT-2023-32666 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...

WordPress WP Native Articles - Instant Articles Plugin for WordPress Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Native Articles - Instant Articles Plugin for WordPress Type Plugin Vulnerable versions = 1.1.6 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0bfd870f25d7...

leeya_bug

leeyabug This is my 0day verif...

CVE-2023-33780

A stored cross-site scripting XSS vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body of news article...

May 23, 2023-KB5026958 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

The Veeam KB Resource Hub

Top 10 Most Popular KBs for Q1 2026 1. KB1832: How to Collect Logs for Veeam Backup & Replication 2. KB1999: Antivirus Exclusions for Veeam Backup & Replication 3. KB4687: Unable to Interact with Some Hypervisors and Cloud Platforms 4. KB1471: How to Manually Back Up Veeam Configuration Databases...

Improper access control

Zammad 5.3.x Fixed in 5.4.0 is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions...

CVE-2023-29868

Zammad 5.3.x Fixed in 5.4.0 is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions...

Zammad 安全漏洞

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad version 5.3.x. The vulnerability stems from vulnerability to faulty access control, where an authenticated attacker with agent and client roles can make unauthorized changes t...