5642 matches found
CVE-2024-39334
MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...
CVE-2024-39334
MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...
PCI DSS 4.0.1: New Clarifications on Client-Side Security – What You Need to Know
As a leading provider of web application and API security solutions, Imperva is committed to helping merchants, payment processors, and anyone seeking to comply with the latest PCI DSS requirements. We previously discussed the changes introduced in PCI DSS 4.0. This blog will cover the...
Bagisto 2.1.2 Client-Side Template Injection
Exploit Title: Bagisto 2.1.2 Client-Side Template InjectionCSTI VueJS Date: 06/18/2024 Exploit Author: tmrswrr Vendor Homepage: https://forums.bagisto.com/ Version: 2.1.2 Tested on: https://demo.bagisto.com/ https://demo.bagisto.com/bagisto-common/search?query=77 49...
The vulnerability of the graphical user interface of the Fortinet FortiPortal security analysis and management tool allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the graphical user interface of the Fortinet FortiPortal security analysis and management tool is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to...
Fedora: Security Advisory for qadwaitadecorations (FEDORA-2024-bfb8617ba3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GO-2024-2875 Wiki.js Stored XSS through Client Side Template Injection in github.com/requarks/wiki
Wiki.js Stored XSS through Client Side Template Injection in github.com/requarks/wiki...
[SECURITY] Fedora 40 Update: qadwaitadecorations-0.1.5-4.fc40
Qt decoration plugin implementing Adwaita-like client-side decorations...
CVE-2023-48789
A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests...
CVE-2023-48789
A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests...
CVE-2023-48789
A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests...
Akaunting 3.1.8 Client-Side Template Injection
Exploit Title: Akaunting 3.1.8 - Client Side Template Injection CSTI Exploit Author: tmrswrr Date: 30/05/2024 Vendor: https://akaunting.com/forum Software Link: https://akaunting.com/apps/crm Vulnerable Versions: 3.1.8 1 Login with admin cred and go to : Currencies New Currency...
[SECURITY] Fedora 40 Update: qadwaitadecorations-0.1.5-3.fc40
Qt decoration plugin implementing Adwaita-like client-side decorations...
CVE-2024-34710
Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. This was possible through the injection ...
CVE-2024-34710 Wiki.js Stored XSS through Client Side Template Injection
Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. This was possible through the injection ...
CVE-2024-34710 Wiki.js Stored XSS through Client Side Template Injection
Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. This was possible through the injection ...
CVE-2024-34710
CVE-2024-34710 affects Wiki.js (Node.js-based wiki app). The issue is a Client-Side Template Injection that enables an attacker to inject malicious JavaScript into page content, triggering when a victim loads the page containing the payload. Root cause: improper sanitization via an invalid HTML t...
CVE-2024-34710 Wiki.js Stored XSS through Client Side Template Injection
Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. This was possible through the injection ...
JAW - A Graph-based Security Analysis Framework For Client-side JavaScript
An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the EsTree SpiderMonkey Spec. JAW can be used for analyzing the client-side of web applications and JavaScript-based programs. This project is licensed under GNU AFFERO GENERAL PUBLIC LICEN...