EUVD-2023-30875

Malicious code in bioql PyPI...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

Authorization

feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will...

CVE-2023-27088

feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will...

CVE-2023-27088

CVE-2023-27088 affects feiqu-opensource with a background vertical authorization issue in IndexController.java. Exploitable by demo users with low permission to perform admin-level operations, including changing the blacklist IP address. CVSS v3.1 metrics show a high-severity, network-based explo...

CVE-2023-27088

feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will...

CVE-2023-27088: Improper Access Control

feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

Cross site scripting

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

PT-2021-21670

Name of the Vulnerable Software and Affected Versions NCH Axon PBX versions 2.22 and earlier Description Cross Site Scripting XSS exists via the blacklist IP address stored. Recommendations For versions 2.22 and earlier, consider disabling the blacklist IP address feature until a patch is...

CVE-2021-37456: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...