CVE-2023-29983

漏洞标题：存储型跨站脚本 Google Dork: 日期：27.04.2023 漏洞作者：Lucas Noki 0xPrototype 厂商主页：https://github.com/vogtmh 软件链接：https://github.com/vogtmh/cmaps 版本：8.0 测试平台：Mac, Windows, Linux CVE：CVE-2023-29983 描述： 发现的漏洞是存储型跨站脚本（Stored Cross Site Scripting）。当向 rest/update/?token= 端点发送请求，且 token 参数中包含恶意载荷时，我们就有可能实现存储型...

CVE-2023-29809

漏洞标题：未认证的SQL注入 Google Dork: 日期: 27.04.2023 漏洞作者: Lucas Noki 0xPrototype 厂商主页: https://github.com/vogtmh 软件链接: https://github.com/vogtmh/cmaps 版本: 8.0 测试平台: Mac, Windows, Linux CVE : CVE-2023-29809 描述: 发现的漏洞是SQL注入。bookmap参数存在漏洞。当访问页面：http://192.168.0.56/rest/booking/index.php?mode=list&bookmap=tes...

CVE-2023-29808

漏洞标题：反射型跨站脚本（Reflected Cross Site Scripting） Google Dork： 日期：27.04.2023 漏洞作者：Lucas Noki 0xPrototype 厂商主页：https://github.com/vogtmh 软件链接：https://github.com/vogtmh/cmaps 版本：8.0 测试环境：Mac、Windows、Linux CVE：CVE-2023-29808 描述： 所发现的漏洞为反射型跨站脚本。当向 /index.php?map=overview&findme= 端点发送请求，且其中的 "findme"...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001283 advisory. In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

EUVD-2023-33346

Malicious code in bioql PyPI...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

Cross site scripting

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

Cross site scripting

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

CVE-2023-29809: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...

CVE-2023-29809

CVE-2023-29809 affects Maximilian Vogt companymaps (cmaps) version 8.0. The vulnerability is a SQL injection in the bookmap parameter that enables a remote attacker to alter the query and potentially execute arbitrary code. Exploits are publicly available (e.g., Exploit-DB, PacketStorm) and the i...

CVE-2023-29808

CVE-2023-29808 affects vogtmh cmaps (Companymaps) 8.0. The vulnerability is Cross-Site Scripting (XSS) in which user-supplied input can be reflected back and cause arbitrary code execution. Public details include a reflected XSS scenario via the findme parameter (example endpoint: /index.php?map=...

CVE-2023-29808

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

CVE-2023-29808: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...

CVE-2023-29983

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

PT-2023-22426 · Unknown · Vogtmh Cmaps

Name of the Vulnerable Software and Affected Versions: vogtmh cmaps companymaps version 8.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code. Recommendations: For version 8.0, update to a version that includes a fix fo...

CVE-2023-29983

CVE-2023-29983 affects Maximilian Vogt cmaps v8.0. The Red Hat/NVD/OSV/Exploits docs describe a Cross-Site Scripting (stored XSS) vulnerability that can be triggered via the auditlog tab in the admin panel, allowing a remote attacker to execute arbitrary code. Exploitation details show an attacke...

CVE-2023-29983: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel...

PT-2023-22502 · Maximilian Vogt · Cmaps

Name of the Vulnerable Software and Affected Versions: Maximilian Vogt cmaps version 8.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Recommendations: For version 8.0, update to a newer version that contains ...

CVE-2023-29808

Cross Site Scripting XSS vulnerability in vogtmh cmaps companymaps 8.0 allows attackers to execute arbitrary code...