📄 Teedy 1.11 Cross Site Scripting

Teedy version 1.11 suffers from a persistent cross site scripting vulnerability. Exploit Title: Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting XSS Exploit Author: Ayato Shitomi @ Fore-Z co.ltd Demo Video: https://www.youtube.com/watch?v=udQgVogsmhA Vendor Homepage: https://teedy.io...

Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)

Exploit Title: Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting XSS Exploit Author: Ayato Shitomi @ Fore-Z co.ltd Demo Video: https://www.youtube.com/watch?v=udQgVogsmhA Vendor Homepage: https://teedy.io/ Software Link: https://github.com/Tomblib0/Teedy Version: 1.11 Tested on: Linux...

CVE-2024-46278

creationtimestamp| type| source ---|---|--- 2024-10-07 19:18:42+00:00| seen| https://t.me/cvedetector/7250 2025-04-17 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvz4mja2a...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Multiple sources describe an XSS issue that could lead to an account takeover (Exploits: stored XSS, including a demonstrated account takeover vector). The Red Hat and CVE records confirm the vulnerability; PT-2024...