CVE-2021-35553: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft component: Class Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2021-35606: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Notification Framework. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment...

CVE-2021-35601: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft component: Students Administration. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segmen...

CVE-2021-35571: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2021-21004

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CS SA Integration Pack versions 9.0 and 9.2 Description: The issue allows a low-privileged attacker with access to the physical communication segment to compromise the PeopleSoft Enterprise CS SA Integration Pack,...

PT-2021-20970

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CS Student Records version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks require human interaction fro...

moodle.cs.ihu.gr Cross Site Scripting vulnerability OBB-2151538

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PetitPotam – NTLM Relay to AD CS

Deployment of an Active Directory Certificate Services AD CS on a corporate environment could allow system administrators to utilize it for establishing trust between different… Continue reading - PetitPotam - NTLM Relay to AD CS...

CVE-2021-32202

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...

CVE-2021-32202

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...

Code injection

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...

CVE-2021-32202

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...

CVE-2021-32202

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...

CVE-2021-32202

CS-Cart 4.11.1 is affected by a cross-site scripting (XSS) vulnerability that can be triggered by manipulating the blog post description field during post creation. The root cause, as described in CNNVD, is insufficient validation/escaping of user input in the post description, enabling copy-past...

PT-2021-19674

Name of the Vulnerable Software and Affected Versions: CS-Cart version 4.11.1 Description: The issue allows for copy-paste XSS by manipulating the post description field in the blog post creation page. Recommendations: For CS-Cart version 4.11.1, consider restricting access to the blog post...

CVE-2021-32202: Improper Neutralization of Input During Web Page Generation

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...

PSPKIAudit - PowerShell toolkit for auditing Active Directory Certificate Services (AD CS)

PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator of PSPKI...

PT-2021-29801

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29849

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-29946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...