10473 matches found
PT-2020-15585
Name of the Vulnerable Software and Affected Versions ArGo Soft Mail Server version 1.8.8.9 Description The issue allows for Cross Site Request Forgery CSRF that can lead to remote arbitrary code execution. This is specifically related to the Administration dashboard component. When an...
WordPress Chamber Dashboard Business Directory plugin <= 3.3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Mihkel Raba in WordPress Chamber Dashboard Business Directory plugin versions = 3.3.0. Solution Update the WordPress Chamber Dashboard Business Directory plugin to the latest available version at least 3.3.1...
Detect FritzFrog and Other Malware Infections with Inventory Data
Recently, Guardicore researchers discovered a new type of malware called “FritzFrog,” which targets multiple industry verticals, including government, finance, and healthcare. It employs brute-forcing SSH credentials as an initial attack vector, uses a proprietary P2P protocol to efficiently...
CVE-2020-24699
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
CVE-2020-24699
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
Cross site scripting
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
CVE-2020-24699
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
CVE-2020-24699
CVE-2020-24699 concerns the Chamber Dashboard Business Directory WordPress plugin (version 3.2.8). Multiple connected sources confirm an authenticated stored Cross-Site Scripting (XSS) vulnerability arising from unsanitized input in the dashboard when creating or editing a business, exploitable b...
coredns cri-o cri-tools etcd flannel kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard olcne yq security update
coredns 1.3.1-1.0.6 - Address CVE-2020-16845 1.3.1-1.0.5 - Fix image location cri-o 1.14.7-1.0.8 - Address CVE-2020-16845 cri-tools 1.14.0-1.0.6 - Address CVE-2020-16845 etcd 3.3.10-1.0.5 - Address CVE-2020-16845 3.3.10-1.0.4 - Fix image location flannel 0.10.0-2.1.12 - Address CVE-2020-16845...
Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting
The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users Editor+ to set XSS payloads in various fields. Login as an editor or admin, then add/edit a business and set the phone number as " The payload will then be executed in the...
CVE-2020-24699: Improper Neutralization of Input During Web Page Generation
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
PT-2020-15813
Name of the Vulnerable Software and Affected Versions The Chamber Dashboard Business Directory plugin version 3.2.8 Description The issue allows for XSS. Recommendations For version 3.2.8, update to a newer version that contains a fix for this issue...
Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting
The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users Editor+ to set XSS payloads in various fields. PoC Login as an editor or admin, then add/edit a business and set the phone number as " The payload will then be executed in t...
CVE-2020-23576
Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...
CVE-2020-23576
Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...
Cross site scripting
Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...
CVE-2020-23576
Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...
CVE-2020-23576
Laborator Neon dashboard v3 is affected by a stored XSS via the chat tab. The CVE-2020-23576 entry documents a stored cross-site scripting vulnerability in Laborator Neon dashboard v3, with CVSS v2 base score 3.5 (LOW) and CVSS v3.1 base score 5.4 (MEDIUM). The provided sources do not specify aff...
PT-2020-15567
Name of the Vulnerable Software and Affected Versions Laborator Neon dashboard version 3 Description The issue is related to stored Cross Site Scripting XSS that can be executed via the chat tab. Recommendations For Laborator Neon dashboard version 3, consider disabling the chat tab functionality...