CVE-2023-29983

エクスプロイトタイトル: 格納型クロスサイトスクリプティング Google Dork: 日付: 27.04.2023 エクスプロイト作者: Lucas Noki 0xPrototype ベンダーホームページ: https://github.com/vogtmh ソフトウェアリンク: https://github.com/vogtmh/cmaps バージョン: 8.0 テスト済み: Mac, Windows, Linux CVE : CVE-2023-29983 説明: 発見された脆弱性は格納型クロスサイトスクリプティング（Stored XSS）です。rest/update/?token=...

CVE-2023-29809

エクスプロイトタイトル: 未認証のSQLインジェクション Google Dork: 日付: 27.04.2023 エクスプロイト作者: Lucas Noki 0xPrototype ベンダーホームページ: https://github.com/vogtmh ソフトウェアリンク: https://github.com/vogtmh/cmaps バージョン: 8.0 テスト済み環境: Mac, Windows, Linux CVE : CVE-2023-29809 説明: 発見された脆弱性はSQLインジェクションです。bookmap パラメータが脆弱です。ページ...

CVE-2023-29808

エクスプロイトタイトル: 反射型クロスサイトスクリプティング Google Dork: 日付: 27.04.2023 エクスプロイト作者: Lucas Noki 0xPrototype ベンダーホームページ: https://github.com/vogtmh ソフトウェアリンク: https://github.com/vogtmh/cmaps バージョン: 8.0 テスト環境: Mac、Windows、Linux CVE : CVE-2023-29808 説明: 発見された脆弱性は反射型クロスサイトスクリプティングです。/index.php?map=overview&findme=...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001283 advisory. In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

EUVD-2023-33346

Malicious code in bioql PyPI...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

Cross site scripting

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

Cross site scripting

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

CVE-2023-29809

CVE-2023-29809 affects Maximilian Vogt companymaps (cmaps) version 8.0. The vulnerability is a SQL injection in the bookmap parameter that enables a remote attacker to alter the query and potentially execute arbitrary code. Exploits are publicly available (e.g., Exploit-DB, PacketStorm) and the i...

CVE-2023-29808

CVE-2023-29808 affects vogtmh cmaps (Companymaps) 8.0. The vulnerability is Cross-Site Scripting (XSS) in which user-supplied input can be reflected back and cause arbitrary code execution. Public details include a reflected XSS scenario via the findme parameter (example endpoint: /index.php?map=...

CVE-2023-29808

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

PT-2023-22426 · Unknown · Vogtmh Cmaps

Name of the Vulnerable Software and Affected Versions: vogtmh cmaps companymaps version 8.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code. Recommendations: For version 8.0, update to a version that includes a fix fo...

CVE-2023-29983

CVE-2023-29983 affects Maximilian Vogt cmaps v8.0. The Red Hat/NVD/OSV/Exploits docs describe a Cross-Site Scripting (stored XSS) vulnerability that can be triggered via the auditlog tab in the admin panel, allowing a remote attacker to execute arbitrary code. Exploitation details show an attacke...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

PT-2023-22502 · Maximilian Vogt · Cmaps

Name of the Vulnerable Software and Affected Versions: Maximilian Vogt cmaps version 8.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Recommendations: For version 8.0, update to a newer version that contains ...

CVE-2023-29808

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

Cmaps v8.0 - SQL injection Vulnerability

Exploit Title: Cmaps v8.0 - SQL injection - Date: 27.04.2023 - Exploit Author: Lucas Noki 0xPrototype - Vendor Homepage: https://github.com/vogtmh - Software Link: https://github.com/vogtmh/cmaps - Version: 8.0 - Tested on: Mac, Windows, Linux - CVE : CVE-2023-29809 Description: The vulnerability...

Fedora 13 : poppler-0.12.4-6.fc13 (2010-15911)

Thu Oct 7 2010 Marek Kasik - 0.12.4-6 - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add poppler-0.12.4-CVE-2010-3704.patch Fix crash in broken pdf code - 0.12.4-5 - Accept 4-digit values in ToUnicode CMaps...