5 matches found
qubotchat < 1.1.6 - Unauthenticated Stored XSS
The plugin doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard. PoC 1. Enter " as the malicious payload into the chatbot input. 2. See XSS vulnerability...
Race condition
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a...
CVE-2023-20014
Cisco Nexus Dashboard Software is affected by CVE-2023-20014, a denial-of-service vulnerability in the DNS functionality caused by improper processing of DNS requests. An unauthenticated, remote attacker can repeatedly send DNS queries to trigger the coredns service to stop or the device to reloa...
CVE-2023-20014
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a...
MAL-2022-5406 Malicious code in polkadot-staking-dashboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ac6037f8efd8498b7430ec7d3450fcbb584dbf0f9e2761e9c12a0a0b8d255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...