140 matches found
coreBOS Panel - Detect
coreBOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """coreBOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'coreBOS Panel - Detect', 'description': 'coreBOS panel was...
CoreBos - .htaccess File Exposure Detection
CoreBos was discovered to have .htaccess file exposed to public which includes sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """CoreBos was discovered to have .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...
WS-2022-0313
Reflected XSS on "DetailViewAjax" via "relationid" parameter in tsolucio/corebos...
WS-2022-0294
In corebos, reflected XSS due to bad sanitization of "idstring" parameter in cbSurvey module...
WS-2022-0293
In corebos, the value for the stufftype parameter is reflected in the web context without proper filtering in place resulting in possibility to execute malicious javascript code...
WS-2022-0288
In corebos, the value for the stuffid parameter is reflected in the web context without proper filtering in place resulting in possibility to execute malicious javascript code...
EUVD-2018-1936
Malware in sbrugna...
EUVD-2023-23771
Malicious code in bioql PyPI...
EUVD-2023-52118
Malicious code in bioql PyPI...
EUVD-2022-51791
Malicious code in bioql PyPI...
EUVD-2023-43766
Malicious code in bioql PyPI...
EUVD-2023-43761
Malicious code in bioql PyPI...
EUVD-2023-43762
Malicious code in bioql PyPI...
EUVD-2023-43763
Malicious code in bioql PyPI...
EUVD-2023-43764
Malicious code in bioql PyPI...
EUVD-2023-43765
Malicious code in bioql PyPI...
CVE-2023-3074
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-48029
Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution ...