CVE-2022-26624

CVE-2022-26624 affects Bootstrap v3.1.11 and v3.3.7, which are vulnerable to a cross-site scripting (XSS) flaw via the Title parameter in /vendor/views/add_product.php. The issue allows arbitrary scripting code execution in the context of the affected site. Root cause details beyond the descripti...

Bootstrap 跨站脚本漏洞

Bootstrap is a web front-end framework developed using HTML, CSS, and JavaScript. Bootstrap versions v3.1.11 and v3.3.7 are vulnerable to a cross-site scripting vulnerability that originates in the Title parameter in /vendor/views/addproduct.php. An attacker could exploit this vulnerability to...

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true

Description Hello and thank you for the wonderful library! We use it extensively in our app. However, I think we've identified an XSS vulnerability in the Export plug-in. If you set the exportOptions in your Bootstrap Table to true, then you can force arbitrary Javascript to execute see the...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.3-alt1

April 2, 2022 Vitaly Lipatov 6.0.3-alt1 - The .NET 6.0.3 and .NET SDK 6.0.103 releases - CVE-2022-24464: .NET Denial of Service Vulnerability - CVE-2022-24512: .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.23-alt1

April 2, 2022 Vitaly Lipatov 3.1.23-alt1 - .NET Core 3.1.23 and .NET Core SDK 3.1.417 releases - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.15-alt1

April 2, 2022 Vitaly Lipatov 5.0.15-alt1 - The .NET 5.0.15 and .NET 5.0.406 SDK releases - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Arbitrary File Deletion Vulnerability in DSCMS of Changsha Desha Network Technology Co.

Dscms is a set of open source projects based on Thinkphp3.1+Bootstrap. Changsha Deshaun Network Technology Co., Ltd DSCMS arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.14-alt1

5.0.14-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - .NET 5.0.14 - February 8, 2022 - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-43877 : ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-41355 : .NET Core Information...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.22-alt1

3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denia...

Security Bulletin: Multiple vulnerabilities may affect IBM Robotic Process Automation

Summary Multiple vulnerabilities in IBM Robotic Process Automation Vulnerability Details CVEID: CVE-2021-26701 DESCRIPTION: Microsoft .NET Core and Visual Studio could allow a remote attacker to execute arbitrary code on the system. By sending a specially crafted request, an attacker could exploi...

WordPress WS Bootstrap plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WS Bootstrap plugin versions = 1.0.2. Solution No patched version available...

WordPress WS Bootstrap plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WS Bootstrap plugin versions = 1.0.2. Solution No patched version available...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.14-alt1

5.0.14-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET 5.0.14 - February 8, 2022 - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-43877 : ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-41355 : .NET Core Information...

OneBlog Cross-Site Scripting Vulnerability

OneBlog is a simple and beautiful , powerful and adaptive Java blog. The use of springboot development , front-end use Bootstrap. support for mobile adaptive , with a complete front-end and back-end management functions . OneBlog in version 2.2.8 before the existence of XSS vulnerability , the...

SB Admin Cross Site Request Forgery / SQL Injection

$$$$$$$\ $$ $$\ $$ | $$ |$$\ $$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$$ |$$ | $$ | $$ |$$ $$\ $$ $$\ $$ | $$ / $$ | $$ | $$ |$$ | $$ | $$$$$$$$ |$$ / $$ | $$ | $$ | $$ |$$ | $$ | $$ |$$ | $$ | $$$$$$$$$ |$$ | $$ |$$\$$$$$$$\ $$$$$$$\ | \/ | ||| | Offensive Security Community Ecuador...

SB Admin Cross Site Request Forgery / SQL Injection Vulnerabilities

Credits & Authors: ================== Taurus Omar - @TaurusOmar email protected taurusomar.com Document Title: =============== SB Admin Bootstrap CSRF / Sqli Vulnerability / Bypasss Login Access Severity Level: =============== High Google & Bing Dorks =================== intitle:SB Admin - login...

The vulnerability of the escapeHTML function in the Bootstrap Table software allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the escapeHTML function in the Bootstrap Table software lies in errors related to data type mixing. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

Malicious code in bootstrap-feature (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3db5e43a78e41f050b0e265c951bc776e693abd20a01108e6c8ea2e15a5e7c4d Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

fastadmin code problem vulnerability

fastadmin is a set of ThinkPHP and Bootstrap-based web backend development framework. fastadmin has a security vulnerability that stems from the fact that Fastadmin v1.2.1 is affected by a file upload vulnerability that allows execution of arbitrary code via shell access. No details of the...