3 matches found
CVE-2023-6432 Cross-site Scripting vulnerability in BigProf products
A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/itemsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to sto...
Cross-site Scripting (XSS)
net.sourceforge.plantuml:plantuml is vulnerable to cross-site scriptingXSS attacks. The library allows SVG markup to get inserted directly into the markup of an enclosing SVG, making it possible to inject specifically crafted malicious SVG files and execute dangerous payloads inside the targeted...
Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...