Metronic Admin Dashboard Template 安全漏洞

Metronic Admin Dashboard Template is a responsive website backend administration template from Metronic based on the Bootstrap framework. A security vulnerability exists in Metronic Admin Dashboard Template version v2.0, which stems from the presence of a Reflective Cross-Site Scripting XSS...

Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 For more details about the security issues, including the impact, a CVSS score...

MAL-2024-8999 Malicious code in @helvetia-italia/ng-selly-lib-operator-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1fd81a66a867d353506b97a895921b666f5831fa169eb6cef4e07ef98e259328 The OpenSSF Package Analysis project identified '@helvetia-italia/ng-selly-lib-operator-dashboard' @ 10.20.37 npm as malicious. It is considered...

RHEL 9 : grafana (RHSA-2024:7202)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7202 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: encoding/gob: golang:...

Responsive Binary mlm 3.2.0 SQL Injection

==================================================================================================================================== | Title : Responsive Binary mlm 3.2.0 Auth By PAss Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ALSA-2024:6947 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 For more details...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131 Zabbix SAML Authentication Exploit This Python...

CodeCanyon RISE Ultimate Project Manager SQL注入漏洞

CodeCanyon RISE Ultimate Project Manager is a project management and CRM software from CodeCanyon Corporation. A SQL injection vulnerability exists in CodeCanyon RISE Ultimate Project Manager version 3.7.0, which stems from the parameter id of the file /index.php/dashboard/save that can lead to S...

Auto/Taxi Stand Management System 1.0 SQL Injection

==================================================================================================================================== | Title : Auto/Taxi Stand Management System 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

Emergency Ambulance Hiring Portal 1.0 SQL Injection

==================================================================================================================================== | Title : Emergency Ambulance Hiring Portal 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-31414

CVE-2024-31414 affects Eaton Foreseer software (WebView dashboard customization). The server-side input sanitization is insufficient, allowing injection and potential execution of malicious scripts when exploited. Public references confirm the vulnerability but do not provide explicit exploit det...

Vaultwarden 安全漏洞

Vaultwarden is an alternative implementation of the Bitwarden server API written in Rust by Daniel García Personal Developer. A security vulnerability exists in Vaultwarden version 1.30.3, which stems from the presence of stored cross-site scripting XSS that allows an authenticated attacker to...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

PT-2024-28738 · Unknown · Vaultwarden

Name of the Vulnerable Software and Affected Versions: Vaultwarden formerly Bitwarden RS version 1.30.3 Description: A stored cross-site scripting XSS or HTML injection issue has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code int...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

Vaultwarden (formerly Bitwarden_RS) 1.30.3 contains a stored XSS/HTML-injection vulnerability in the admin dashboard. The attack requires authentication and could let an attacker inject code rendered in an administrator’s browser, though the default CSP mitigates many exploitation paths. The issu...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...