CVE-2023-31299

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Barcode field of a container...

Cross site scripting

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Barcode field of a container...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami, Inc. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of a cross-site scripting vulnerability. Allows remote attackers to execute arbitrary code via the...

CVE-2023-31299

CVE-2023-31299 : Cross Site Scripting (XSS) in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718) , via the container’s Barcode field . The cited sources describe remote attackers potentially executing arbitrary code due to this XSS, but the provided documents do not specify af...

CVE-2023-31299

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Barcode field of a container...

[SECURITY] [DLA 3675-1] zbar security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3675-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 30, 2023 https://wiki.debian.org/LTS -...

mutter bug fix update

An update is available for mutter. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mutter is a compositing window manager that displays and manages desktop throu...

The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers allows a perpetrator to cause a service failure.

The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the microprogrammed software of SIMATIC MV540, MV550, and MV560 barcode readers, related to uncontrolled resource consumption, allows a intruder to cause malfunctions during maintenance operations.

The vulnerability of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers is related to an uncontrolled consumption of resources during the processing of IP packets. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

WooCommerce Box Office < 1.1.52 - Unauthenticated Ticket Barcode Update

The plugin does not have authorisation and CSRF when updating a ticket bar-code, allowing unauthenticated users to perform such action curl https://example.com/wp-admin/admin-ajax.php -d "action=saveticketbarcode&ticketbarcodeimage=xxx&ticketbarcodetext=xxxxx&ticketid=86"...

thailandbarcode.com Cross Site Scripting vulnerability OBB-3154266

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@adobe/helix-cli (>=0.10.6 <=2.5.4), @baivoom/ngx-barcode-scanner (>=0.0.4 <=0.0.6) +58 more potentially affected by CVE-2022-22984 via snyk-sbt-plugin (>=1.0.2 <=2.15.0)

snyk-sbt-plugin NPM version =1.0.2, =0.10.6, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =3.2.4, =0.0.2, =0.0.17, =0.2.2, =1.20.0-alpha.11736.3, =2.3.5, =2.6.4 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...

@adobe/git-server (>=0.9.17 <=1.0.0), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293 <=5.7.6) +34 more potentially affected by CVE-2022-22984 via snyk-python-plugin (>=1.0.0 <=1.24.0)

snyk-python-plugin NPM version =1.0.0, =0.9.17, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.11, =1.0.1 - @ericblade/quagga2-redux-middleware =1.0.1 and more Source cves: CVE-2022-22984 Source advisory:...

CVE-2022-40290

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting XSS vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users...

CVE-2022-40290

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting XSS vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users...

Cross site scripting

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting XSS vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users...

CVE-2022-40290

CVE-2022-40290 affects PHP Point of Sale (POS) version 19.0, with an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation feature. The underlying issue allows an attacker to craft an unsafe link that could compromise users. Public details consistently descr...

CVE-2022-40290 Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting XSS vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users...

PHP Point of Sale 跨站脚本漏洞

PHP Point of Sale is an online point of sale system for small retail businesses from PHP Point of Sale, Inc. A security vulnerability exists in PHP Point of Sale version 19.0, which stems from a barcode generation feature that allows an unauthenticated attacker to generate insecure links that cou...

PT-2022-25326 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The application is affected by an unauthenticated Reflected Cross-Site Scripting XSS vulnerability in the barcode generation functionality. This allows...