Lucene search
+L

123 matches found

Cvelist
Cvelist
added 2024/01/09 12:0 a.m.21 views

CVE-2023-38827

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

6.5AI score0.00434EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.6 views

Follet School Solutions Destiny Security Breach

Follet School Solutions Destiny is a school solution from Follet School Solutions Destiny, Inc. A security vulnerability exists in Follet School Solutions Destiny v.2001AU4 and later versions that stems from the presence of a cross-site scripting XSS vulnerability. An attacker can run arbitrary...

6.1CVSS6.3AI score0.00434EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/12/25 8:15 a.m.5 views

CVE-2023-38826

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

6.1CVSS5.8AI score0.00386EPSS
Exploits1References3
OSV
OSV
added 2023/12/25 8:15 a.m.4 views

CVE-2023-38826

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

6.1CVSS5.8AI score0.00386EPSS
Exploits1References2
Prion
Prion
added 2023/12/25 8:15 a.m.17 views

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

5.8CVSS6.2AI score0.00386EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/12/25 12:0 a.m.4 views

Follet Learning Solutions Destiny Security Breach

Follet Learning Solutions Destiny is an educational management system from Follet Learning, Inc. A security vulnerability exists in Follet Learning Solutions Destiny version 20.01U and prior versions, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the component...

6.1CVSS5.8AI score0.00386EPSS
Exploits1References2
CVE
CVE
added 2023/12/25 12:0 a.m.38 views

CVE-2023-38826

CVE-2023-38826 — Follett Destiny (through 20.0 1U) is a Cross Site Scripting (XSS) issue exploitable via the handlewpesearchform.do endpoint, specifically through the searchString parameter. The PT-2023-26613 entry confirms affected software and versions and provides concrete exploit context, inc...

6.1CVSS6AI score0.00386EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/12/25 12:0 a.m.27 views

CVE-2023-38826

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

6.1AI score0.00386EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/12/11 12:0 a.m.5 views

PT-2023-26613 · Follett · Follett Destiny

Name of the Vulnerable Software and Affected Versions: Follet Learning Solutions Destiny versions through 20.0 1U Description: A Cross Site Scripting XSS issue exists, allowing exploitation via the "handlewpesearchform.do" endpoint, specifically through the searchString variable. Recommendations:...

6.1CVSS6AI score0.00386EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/12/11 12:0 a.m.8 views

PT-2023-26614 · Follett · Follet School Solutions Destiny

Name of the Vulnerable Software and Affected Versions: Follet School Solutions Destiny versions 20 0 1 AU4 and later Description: The issue allows a remote attacker to run arbitrary code via the "presentonesearchresultsform.do" API endpoint. This enables the execution of arbitrary code, potential...

6.1CVSS6.9AI score0.00434EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/01/16 12:0 a.m.4 views

clan7ups SQL注入漏洞

clan7ups is an offshoot of the old Destiny Universal Point System. An SQL injection vulnerability exists in antonbolling clan7ups, which stems from a problem with the unknown functionality of the component Login/Session, leading to SQL injection...

9.8CVSS6.5AI score0.00643EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/12/22 12:0 a.m.36 views

destiny.gg chat 跨站请求伪造漏洞

destiny.gg chat is destiny.gg open source a destin.gg chat backend. destiny.gg chat suffers from a cross-site request forgery vulnerability that stems from a problem with the function websocket.Upgrader in the file main.go, which could lead to cross-site request forgery...

8.8CVSS7.5AI score0.00343EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/12/22 12:0 a.m.9 views

PT-2022-9020 · Unknown · Destiny.Gg Chat

Name of the Vulnerable Software and Affected Versions: destiny.gg chat affected versions not specified Description: A vulnerability was found in the destiny.gg chat, affecting the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery, and the attack...

8.8CVSS6.8AI score0.00343EPSS
Exploits0References10
Openbugbounty
Openbugbounty
added 2022/06/21 5:15 p.m.9 views

destiny-ideas.com Cross Site Scripting vulnerability OBB-2662218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
vulnersOsv
vulnersOsv
added 2021/09/22 8:35 p.m.7 views

access-control (=0.0.7), destiny-api (=1.0.0) +11 more potentially affected by unknown CVE via millisecond (>=0.0.1 <=0.1.1)

millisecond NPM version =0.0.1, =0.11.0, =0.0.0, =0.0.1, =0.4.0, =0.0.1, =1.0.0, =1.0.4, =0.0.9, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M489-XR35-FJXR...

5.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/10/20 5:40 p.m.64 views

destinynetworkalliance.org Cross Site Scripting vulnerability OBB-1430095

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/10/20 4:21 p.m.10 views

dmg.destiny-child.jp Cross Site Scripting vulnerability OBB-1429693

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2020/08/21 12:0 p.m.28 views

‘DiceKeys’ Creates a Master Password for Life With One Roll

A new kit leaves your cryptographic destiny up to 25 cubes in a plastic box...

1.5AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/10/29 12:42 p.m.18 views

destiny-store.com XSS vulnerability

Open Bug Bounty ID: OBB-692024 Description| Value ---|--- Affected Website:| destiny-store.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

0.1AI score
Exploits0
hackapp
hackapp
added 2017/03/21 6:1 p.m.9 views

Destiny - Customized SSL, GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Destiny published at the 'play' market has multiple vulnerabilities...

0.1AI score
Exploits0References1Affected Software1
Rows per page
Query Builder