1140 matches found
CVE-2023-44042
A stored cross-site scripting XSS vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter...
CVE-2023-44042
A stored cross-site scripting XSS vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter...
PT-2023-29080 · Unknown · Blackcat Cms
Name of the Vulnerable Software and Affected Versions: Black Cat CMS version 1.4.1 Description: A cross-site scripting XSS vulnerability exists in Black Cat CMS, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. This issue is present in two locations: the...
CVE-2023-44043
A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...
CVE-2023-44043
CVE-2023-44043 affects Black Cat CMS version 1.4.1. The vulnerability is a reflected cross-site scripting (XSS) in the file "/install/index.php" triggered by crafting a payload in the Website title parameter. The impact, as described in the provided sources, is execution of arbitrary web scripts ...
CVE-2023-44043
A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...
CVE-2023-44042
CVE-2023-44042 is a stored XSS vulnerability impacting Black Cat CMS 1.4.1, caused by injection into the Website header parameter in /settings/index.php. The available documents describe arbitrary web-script execution as the consequence but do not provide exploit details, affected versions beyond...
Malicious code in fca-cat-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eca27bb70f94f07102507a57884356d20ed15265a454cb492a0394769476d37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8174 Malicious code in fca-cat-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eca27bb70f94f07102507a57884356d20ed15265a454cb492a0394769476d37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
cat-henschelmann.de Cross Site Scripting vulnerability OBB-3697275
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Die Hard 2. Or how not to hack airplanes
How could I criticise possibly the best action movie series of all time? Well, it’s to help dispel myths about hacking planes. TV shows and films help set a narrative that is hard to shift around aviation cyber, giving the travelling public a misleading view of their security when flying. So let’...
CVE-2023-37164
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
Diafan CMS 跨站脚本漏洞
Diafan CMS is a website builder from Diafan. It is used to create online stores. A cross-site scripting vulnerability exists in Diafan CMS v6.0, which originates from the lack of effective filtering and escaping of user-supplied data in the catid parameter of /shop/?module=shop&action=search, whi...
WordPress Quiz Cat Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Software Quiz Cat Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 067050a23a59 Credits Rafie Muhammad Patchstack Required privileg...
PT-2023-25200 · Thinutech · Thinucms
Name of the Vulnerable Software and Affected Versions: ThinuTech ThinuCMS version 1.5 Description: A critical issue affects some unknown functionality of the file /category.php. The manipulation of the cat id argument leads to sql injection. The attack may be launched remotely. Recommendations: F...
ciclobcn21.cat Cross Site Scripting vulnerability OBB-3476369
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A week in security (June 19 - 25)
Last week on Malwarebytes Labs: Microsoft Azure AD flaw can lead to account takeover 5 facts to know about the Royal ransomware gang Malwarebytes only vendor to win every MRG Effitas award in 2022 & 2023 UPS warns customers of phishing attempts after data accessed 6 tips for a cybersecure honeymo...
cat-n-around.com Cross Site Scripting vulnerability OBB-3297590
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
arcticcat.eu Cross Site Scripting vulnerability OBB-3256422
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
