6145 matches found
CVE-2024-0183: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/students.php of the component NIA Office. The manipulation leads to basic cross site scripting. It is possible to initiate the attack...
UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware
The threat actor known as UAC-0099 has been linked to continued attacks aimed at Ukraine, some of which leverage a high-severity flaw in the WinRAR software to deliver a malware strain called LONEPAGE. "The threat actor targets Ukrainian employees working for companies outside of Ukraine,"...
Dell BIOS Security Vulnerability
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS, which stems from pre-boot direct access to memory, and can be exploited by an attacker to execute arbitrary code on the device...
CVE-2023-40655
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40655
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
Cross site scripting
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40655 Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40655 Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40655
The CVE-2023-40655 entry concerns a reflected XSS in the Proforms Basic component for Joomla. Multiple sources (NVD, Red Hat, CVE List, Vulnrichment, and others) describe it as a reflected XSS affecting the Proforms Basic extension for Joomla, but none provide explicit affected versions or concre...
CVE-2023-40655: Improper Neutralization of Input During Web Page Generation
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Proforms Basic component...
Phoenix WinPhlash Privilege Escalation
The vulnerability of the BIOS loading, backup, and recovery utility for the Phoenix WinPhlash flash device previously known as Phoenix SecureCore Tiano WinFlash is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges...
PT-2023-27577 · Joomla · Proforms Basic
Name of the Vulnerable Software and Affected Versions: Proforms Basic component for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla. Recommendations: At the moment, there is no information about a newer...
JTEKT ELECTRONICS HMI GC-A2 series Security Breach
JTEKT ELECTRONICS HMI GC-A2 series is a series of HMIs from JTEKT. The JTEKT ELECTRONICS HMI GC-A2 series suffers from a security vulnerability that originates from a Denial of Service DoS in the NetBIOS service, which can be exploited by an attacker to send specially crafted packets to a specifi...
CVE-2023-49947
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication...
CVE-2023-49947
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication...
CVE-2023-49947
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication...
Authentication flaw
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication...
