CVE-2024-39926

Vaultwarden (formerly Bitwarden_RS) version 1.30.3 is vulnerable to a stored cross-site scripting (XSS) or HTML injection issue within the admin dashboard . This flaw allows an authenticated attacker to inject malicious code that could be executed or rendered in an administrator's browser when th...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

Maid Hiring Management System 1.0 Insecure Settings

==================================================================================================================================== | Title : Maid Hiring Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

CVE-2024-43796 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-centraldashboard, sqlpad, arangodb...

CVE-2024-43799 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-centraldashboard, thingsboard, sqlpad, arangodb...

CVE-2024-8268

The Frontend Dashboard plugin for WordPress is vulnerable to unauthorized code execution due to insufficient filtering on callable methods/functions via the ajaxrequest function in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2024-8268

The Frontend Dashboard plugin for WordPress is vulnerable to unauthorized code execution due to insufficient filtering on callable methods/functions via the ajaxrequest function in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2024-8268 Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call

The Frontend Dashboard plugin for WordPress is vulnerable to unauthorized code execution due to insufficient filtering on callable methods/functions via the ajaxrequest function in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2024-8268 Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call

The Frontend Dashboard plugin for WordPress is vulnerable to unauthorized code execution due to insufficient filtering on callable methods/functions via the ajaxrequest function in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2024-8268

CVE-2024-8268 affects the Frontend Dashboard WordPress plugin (versions

WordPress Frontend Dashboard plugin <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call vulnerability

Authenticated Subscriber+ Arbitrary Function Call vulnerability discovered by Lucio Sá in WordPress Plugin Frontend Dashboard versions = 2.2.4...

WordPress plugin Frontend Dashboard 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code injection...

WordPress Frontend Dashboard Plugin <= 2.2.4 is vulnerable to Arbitrary Code Execution

Software Frontend Dashboard Type Plugin Vulnerable versions = 2.2.4 Fixed in 2.2.5 OWASP Top 10 A3: Injection Classification Arbitrary Code Execution CVE CVE-2024-8268 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 9cb7568890b1 Credits Lucio Sá Required privilege...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-centraldashboard, thingsboard, sqlpad, opensearch-dashboards-fips, arangodb, opensearch-dashboards...

PT-2024-38901 · WordPress · Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: Frontend Dashboard plugin for WordPress versions up to, and including, 2.2.4 Description: The issue is related to insufficient filtering on callable methods/functions via the ajax request function, allowing authenticated attackers with...

SSL Dashboard in ADM does not show TLS Information of SDX

Don't see TLS details of SDX NetScaler in ADM SSL Dashboard. We can see TLS details of all ADC's in the SSL Dashboard but for SDX it is missing...

CVE-2024-45180

SquaredUp DS for SCOM 6.2.1.11104 allows XSS...

SquaredUp DS for SCOM 安全漏洞

SquaredUp DS for SCOM is a SquaredUp Dashboard Server for SCOM from SquaredUp, Inc. A security vulnerability exists in SquaredUp DS for SCOM version 6.2.1.11104 that stems from vulnerability to cross-site scripting attacks...

Nginx+ Dashboard Unrestricted Access

Nginx Plus is a proprietary solution from F5 built on top of Nginx and featuring a dashboard called "Live Activity Monitoring". When accessible without authentication it may contain sensitives information that can be used by an attacker. No source data...