29 matches found
CVE-2022-2511
Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...
BlueSpice 跨站脚本漏洞
BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in the BlueSpice 4.x series of releases, which stems from a commonuserinterface component that allows an attacker to inject arbitrary HTML into a page using the title parameter of the...
Malicious code in @idse/common-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf8a80088e5eda0a3d5b7faca5cd4f36b1cc98345a383d657e4313e765efb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-2511
Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...
Elpscrk - An Intelligent Common User-Password Profiler Based On Permutations And Statistics
An Intelligent common user-password profiler that's named after the same tool in Mr.Robot series S01E01 In simple words, elpscrk will ask you about all info you know about your target then will try to generate every possible password the target could think of, it all depends on the information yo...
McAfee Common UI ePO Extension Information Disclosure Vulnerability
McAfee Common UI CUI is a set of user interfaces for managing McAfee products from McAfee, Inc. in the United States. ePO extension is one of the software managers. A security vulnerability exists in the ePO extension in McAfee CUI version 2.0.2. A remote attacker could exploit the vulnerability ...
CVE-2017-15329
Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests tha...
CVE-2014-3222: Undefined Security Weakness
In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ MyBulletinBoard MyBB 1.1.3 Remote Code Execution Exploit ============================================================ !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 email protected...