CVE-2023-29808

Exploit Title: Reflected Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29808 Description: The...

CVE-2023-29809

Exploit Title: Unauthenticated SQL injection Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29809 Description: The vulnerabili...

CVE-2023-29983

Exploit Title: Stored Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29983 Description: The vulnerability...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001283 advisory. In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

EUVD-2023-33346

Malicious code in bioql PyPI...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

Cross site scripting

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

Cross site scripting

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

PT-2023-22502 · Maximilian Vogt · Cmaps

Name of the Vulnerable Software and Affected Versions: Maximilian Vogt cmaps version 8.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Recommendations: For version 8.0, update to a newer version that contains ...

CVE-2023-29809

CVE-2023-29809 affects Maximilian Vogt companymaps (cmaps) version 8.0. The vulnerability is a SQL injection in the bookmap parameter that enables a remote attacker to alter the query and potentially execute arbitrary code. Exploits are publicly available (e.g., Exploit-DB, PacketStorm) and the i...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

CVE-2023-29809: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...

CVE-2023-29808: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

CVE-2023-29983: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

CVE-2023-29808

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

PT-2023-22426 · Unknown · Vogtmh Cmaps

Name of the Vulnerable Software and Affected Versions: vogtmh cmaps companymaps version 8.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code. Recommendations: For version 8.0, update to a version that includes a fix fo...

CVE-2023-29808

CVE-2023-29808 affects vogtmh cmaps (Companymaps) 8.0. The vulnerability is Cross-Site Scripting (XSS) in which user-supplied input can be reflected back and cause arbitrary code execution. Public details include a reflected XSS scenario via the findme parameter (example endpoint: /index.php?map=...

CVE-2023-29808

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

CVE-2023-29983

CVE-2023-29983 affects Maximilian Vogt cmaps v8.0. The Red Hat/NVD/OSV/Exploits docs describe a Cross-Site Scripting (stored XSS) vulnerability that can be triggered via the auditlog tab in the admin panel, allowing a remote attacker to execute arbitrary code. Exploitation details show an attacke...