CVE-2020-23824

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...

Cross site request forgery (csrf)

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...

CVE-2020-23824

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...

WordPress Chamber Dashboard Business Directory plugin <= 3.3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by Mihkel Raba in WordPress Chamber Dashboard Business Directory plugin versions = 3.3.0. Solution Update the WordPress Chamber Dashboard Business Directory plugin to the latest available version at least 3.3.1...

Detect FritzFrog and Other Malware Infections with Inventory Data

Recently, Guardicore researchers discovered a new type of malware called “FritzFrog,” which targets multiple industry verticals, including government, finance, and healthcare. It employs brute-forcing SSH credentials as an initial attack vector, uses a proprietary P2P protocol to efficiently...

CVE-2020-24699

The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...

CVE-2020-24699

The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...

Cross site scripting

The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...

CVE-2020-24699

The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...

CVE-2020-24699

CVE-2020-24699 concerns the Chamber Dashboard Business Directory WordPress plugin (version 3.2.8). Multiple connected sources confirm an authenticated stored Cross-Site Scripting (XSS) vulnerability arising from unsanitized input in the dashboard when creating or editing a business, exploitable b...

coredns cri-o cri-tools etcd flannel kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard olcne yq security update

coredns 1.3.1-1.0.6 - Address CVE-2020-16845 1.3.1-1.0.5 - Fix image location cri-o 1.14.7-1.0.8 - Address CVE-2020-16845 cri-tools 1.14.0-1.0.6 - Address CVE-2020-16845 etcd 3.3.10-1.0.5 - Address CVE-2020-16845 3.3.10-1.0.4 - Fix image location flannel 0.10.0-2.1.12 - Address CVE-2020-16845...

Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users Editor+ to set XSS payloads in various fields. Login as an editor or admin, then add/edit a business and set the phone number as " The payload will then be executed in the...

Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users Editor+ to set XSS payloads in various fields. PoC Login as an editor or admin, then add/edit a business and set the phone number as " The payload will then be executed in t...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

Cross site scripting

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by a stored XSS via the chat tab. The CVE-2020-23576 entry documents a stored cross-site scripting vulnerability in Laborator Neon dashboard v3, with CVSS v2 base score 3.5 (LOW) and CVSS v3.1 base score 5.4 (MEDIUM). The provided sources do not specify aff...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

goldpricedashboard.goldprice.org Cross Site Scripting vulnerability OBB-1278263

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-5412

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can...