123 matches found
CVE-2023-38827
Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...
Follet School Solutions Destiny Security Breach
Follet School Solutions Destiny is a school solution from Follet School Solutions Destiny, Inc. A security vulnerability exists in Follet School Solutions Destiny v.2001AU4 and later versions that stems from the presence of a cross-site scripting XSS vulnerability. An attacker can run arbitrary...
CVE-2023-38826
A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...
CVE-2023-38826
A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...
Follet Learning Solutions Destiny Security Breach
Follet Learning Solutions Destiny is an educational management system from Follet Learning, Inc. A security vulnerability exists in Follet Learning Solutions Destiny version 20.01U and prior versions, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the component...
CVE-2023-38826
CVE-2023-38826 — Follett Destiny (through 20.0 1U) is a Cross Site Scripting (XSS) issue exploitable via the handlewpesearchform.do endpoint, specifically through the searchString parameter. The PT-2023-26613 entry confirms affected software and versions and provides concrete exploit context, inc...
CVE-2023-38826
A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...
PT-2023-26613 · Follett · Follett Destiny
Name of the Vulnerable Software and Affected Versions: Follet Learning Solutions Destiny versions through 20.0 1U Description: A Cross Site Scripting XSS issue exists, allowing exploitation via the "handlewpesearchform.do" endpoint, specifically through the searchString variable. Recommendations:...
PT-2023-26614 · Follett · Follet School Solutions Destiny
Name of the Vulnerable Software and Affected Versions: Follet School Solutions Destiny versions 20 0 1 AU4 and later Description: The issue allows a remote attacker to run arbitrary code via the "presentonesearchresultsform.do" API endpoint. This enables the execution of arbitrary code, potential...
clan7ups SQL注入漏洞
clan7ups is an offshoot of the old Destiny Universal Point System. An SQL injection vulnerability exists in antonbolling clan7ups, which stems from a problem with the unknown functionality of the component Login/Session, leading to SQL injection...
destiny.gg chat 跨站请求伪造漏洞
destiny.gg chat is destiny.gg open source a destin.gg chat backend. destiny.gg chat suffers from a cross-site request forgery vulnerability that stems from a problem with the function websocket.Upgrader in the file main.go, which could lead to cross-site request forgery...
PT-2022-9020 · Unknown · Destiny.Gg Chat
Name of the Vulnerable Software and Affected Versions: destiny.gg chat affected versions not specified Description: A vulnerability was found in the destiny.gg chat, affecting the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery, and the attack...
destiny-ideas.com Cross Site Scripting vulnerability OBB-2662218
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
access-control (=0.0.7), destiny-api (=1.0.0) +11 more potentially affected by unknown CVE via millisecond (>=0.0.1 <=0.1.1)
millisecond NPM version =0.0.1, =0.11.0, =0.0.0, =0.0.1, =0.4.0, =0.0.1, =1.0.0, =1.0.4, =0.0.9, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M489-XR35-FJXR...
destinynetworkalliance.org Cross Site Scripting vulnerability OBB-1430095
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dmg.destiny-child.jp Cross Site Scripting vulnerability OBB-1429693
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
‘DiceKeys’ Creates a Master Password for Life With One Roll
A new kit leaves your cryptographic destiny up to 25 cubes in a plastic box...
destiny-store.com XSS vulnerability
Open Bug Bounty ID: OBB-692024 Description| Value ---|--- Affected Website:| destiny-store.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
Destiny - Customized SSL, GPL license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Destiny published at the 'play' market has multiple vulnerabilities...