36 matches found
CVE-2023-29983
漏洞标题：存储型跨站脚本 Google Dork: 日期：27.04.2023 漏洞作者：Lucas Noki 0xPrototype 厂商主页：https://github.com/vogtmh 软件链接：https://github.com/vogtmh/cmaps 版本：8.0 测试平台：Mac, Windows, Linux CVE：CVE-2023-29983 描述： 发现的漏洞是存储型跨站脚本（Stored Cross Site Scripting）。当向 rest/update/?token= 端点发送请求，且 token 参数中包含恶意载荷时，我们就有可能实现存储型...
CVE-2026-82759: Use of a One-Way Hash with a Predictable Salt
Use of a One-Way Hash with a Predictable Salt vulnerability in team-alembic AshAuthentication allows readers of the audit store to recover the client IP addresses that the audit log add-on's :hash privacy mode is meant to pseudonymise. AshAuthentication.AddOn.AuditLog.IpPrivacy.haship/1 computes ...
389 Directory Server 安全漏洞
389 Directory Server is an open-source implementation of a highly available, fully functional, reliable, and secure LDAP server. There is a security vulnerability in 389 Directory Server, which arises from the use of the createmaskedentrystring function in auditlog.c when audit logs are enabled...
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
Linux Distros Unpatched Vulnerability : CVE-2022-38248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting XSS vulnerabilities at auditlog.php. CVE-2022-38248 Note that Nessus relies on t...
MAL-2025-46935 Malicious code in monolith-twirp-packageregistry-auditlog (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b1f2e36b99ce4f967ff2e008d0e46e1b498c7d368a334727e1ea28e401529e7 The OpenSSF Package Analysis project identified 'monolith-twirp-packageregistry-auditlog' @ 1.0.2 rubygems as malicious. It is considered...
Malicious code in vite-tsauditlog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5209 Malicious code in vite-auditlog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f572293aa98c3908f745c0548edfb1b2fff98c0f4df1f5e4ba96ec83743d5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vite-auditlog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f572293aa98c3908f745c0548edfb1b2fff98c0f4df1f5e4ba96ec83743d5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eth-auditlog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5158 Malicious code in eth-auditlog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Rancher Audit Log Sensitive Information Leak
Rancher versions between 2.6.0-2.6.13, 2.7.0-2.7.9, 2.8.0-2.8.1 inclusive contain a vulnerability where sensitive data is leaked into the audit logs. Rancher Audit Logging is an opt-in feature, only deployments that have it enabled and have AUDITLEVEL set to 1 or above are impacted by this issue...
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
Cross site scripting
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
CVE-2023-29983
CVE-2023-29983 affects Maximilian Vogt cmaps v8.0. The Red Hat/NVD/OSV/Exploits docs describe a Cross-Site Scripting (stored XSS) vulnerability that can be triggered via the auditlog tab in the admin panel, allowing a remote attacker to execute arbitrary code. Exploitation details show an attacke...
CVE-2023-29983: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...
PT-2023-22502 · Maximilian Vogt · Cmaps
Name of the Vulnerable Software and Affected Versions: Maximilian Vogt cmaps version 8.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Recommendations: For version 8.0, update to a newer version that contains ...
