6149 matches found
CVE-2023-36093
There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...
CVE-2023-36093
There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...
Cross site scripting
There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...
CVE-2023-36093
There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...
EyouCMS cross-site scripting vulnerabilities
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS version 1.6.3, which originates from a stored cross-site scripting XSS vulnerability in the Basic Information...
State-Backed Hackers Employ Advanced Methods to Target Middle Eastern and African Governments
Governmental entities in the Middle East and Africa have been at the receiving end of sustained cyber-espionage attacks that leverage never-before-seen and rare credential theft and Exchange email exfiltration techniques. "The main goal of the attacks was to obtain highly confidential and sensiti...
State-Backed Hackers Employ Advanced Methods to Target Middle Eastern and African Governments
Governmental entities in the Middle East and Africa have been at the receiving end of sustained cyber-espionage attacks that leverage never-before-seen and rare credential theft and Exchange email exfiltration techniques. "The main goal of the attacks was to obtain highly confidential and sensiti...
org.jenkins-ci.main:jenkins-test-harness (1.572), org.jenkins-ci.main:jenkins-war (1.572) +14 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.572)
org.jenkins-ci.main:jenkins-core MAVEN version 1.572 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.572 - org.jenkins-ci.main:jenkins-war 1.572 -...
Zyxel Router Detection - Get Basic Information
Binary data zyxelrouterdetectgetbasicinfo.nbin...
PT-2023-12910 · Hewlett Packard · Hp Bios
Name of the Vulnerable Software and Affected Versions: HP BIOS affected versions not specified Description: A potential Time-of-Check to Time-of-Use TOCTOU issue has been identified in the HP BIOS for certain HP PC products. This may allow for arbitrary code execution, denial of service, and...
CVE-2023-29168
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...
CVE-2023-29168
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...
Design/Logic Flaw
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...
CVE-2023-29168
CVE-2023-29168 affects PTC Vuforia Studio: the local Vuforia web application does not support HTTPS and federated credentials are passed via basic authentication, exposing credentials. Affected products: Vuforia Studio all versions prior to 9.9. According to the ICS advisory, it is exploitable re...
CVE-2023-29168 PTC Vuforia Studio Insufficiently Protected Credentials
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...
CVE-2023-29168 PTC Vuforia Studio Insufficiently Protected Credentials
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...
Unauthenticated Blind SSRF
Description The Oxeye research team found Owncast vulnerable to an Unauthenticated Blind SSRF vulnerability. This vulnerability may allow an unauthenticated attacker to force the Owncast server to send HTTP requests to arbitrary locations using the GET HTTP method. This vulnerability also allows...
PT-2023-22183
Name of the Vulnerable Software and Affected Versions Vuforia affected versions not specified Description The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication. Recommendations At the moment, there is no information about a newer...
CVE-2023-29168: Insufficiently Protected Credentials
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...