40 matches found
GHSA-6G6M-M6H5-W9GF
creationtimestamp| type| source ---|---|--- 2025-06-06 23:11:11+00:00| seen| https://gist.github.com/zhenthebuilder/796766496fd40b2efb4ad88864ee96cb...
CVE-2024-28956
creationtimestamp| type| source ---|---|--- 2025-05-12 15:18:15+00:00| seen| https://seclists.org/oss-sec/2025/q2/121 2025-05-12 17:32:53+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3loyiuejv6m2d 2025-05-12 18:02:37+00:00| seen|...
CVE-2025-3245
creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10436 2025-04-04 13:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicilhad2u 2025-04-04 16:20:54+00:00| seen|...
CERTFR-2019-ALE-010
creationtimestamp| type| source ---|---|--- 2025-01-29 16:30:25+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfdt7u7v2g...
CERTFR-2018-ALE-002
creationtimestamp| type| source ---|---|--- 2025-01-29 16:23:38+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvexo7ogf2g...
GHSA-MH2X-FCQH-FMQV
creationtimestamp| type| source ---|---|--- 2024-11-25 19:18:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113545203299807277...
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
Impact When document names are validated according to a name strategy disabled by default, XWiki is vulnerable to a reflected XSS attack in the page creation form. To reproduce, make sure that "Validate names before saving" is enabled in the administration under "Editing" - "Name strategies" and...
CVE-2023-45134 XWiki Platform XSS vulnerability from account in the create page form via template provider
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. org.xwiki.platform:xwiki-platform-web starting in version 3.1-milestone-1 and prior to 13.4-rc-1, org.xwiki.platform:xwiki-platform-web-templates prior to versions 14.10.2 and 15.5-rc-1, and...
PT-2023-29860 · Frappe · Frappe
Name of the Vulnerable Software and Affected Versions: Frappe versions prior to 14.49.0 Description: Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and an integrated client side library. A malicious Frappe user with desk access could create...
XWiki Platform 注入漏洞
XWiki Platform is a suite of Wiki platforms from the XWiki Foundation in France for creating web collaboration applications. An injection vulnerability exists in XWiki Platform versions prior to 14.10.6, 15.2-rc-1 and prior to 15.2-rc-1, which can be exploited to inject XWiki syntax and Velocity...
URL Spoofing
firefox:edge is vulnerable to URL spoofing. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the...
Reportlab Server-Side Request Forgery Vulnerability
ReportLab is a Danish ReportLab company for the creation of data-driven PDF documents and custom vector graphics open source engine . A security vulnerability exists in Reportlab. The vulnerability stems from a server-side request forgery vulnerability that can be triggered by img tags. Currently...
[SECURITY] Fedora 32 Update: podofo-0.9.6-11.fc32
PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...
CVE-2019-8763
creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:41:24+00:00| seen| https://t.me/ctinow/208552 2024-03-15 11:46:43+00:00| seen| https://t.me/ctinow/208653 2024-03-15 11:46:44+00:00| seen| https://t.me/ctinow/20865...
CVE-2019-0579
creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402...
Apache OpenOffice Update Patches Four Vulnerabilities
The Apache Software Foundation fixed four vulnerabilities Friday tied to its popular Apache OpenOffice suite of free productivity applications. The patches are for the suite’s word processing and graphics apps. Each of the vulnerabilities are rated medium in severity. Three of the four bugs patch...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via document.implementation.createHTMLDocument function. In Firefox and Safari an attacker can use an malicious inert document created using the vulnerable function. Details Cross-site scripting or XSS is a code...
CVE-2003-0471
creationtimestamp| type| source ---|---|--- 2010-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16776 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/altnwebadmin.rb 2025-02-06 03:13:37+00:00| seen|...
Internet Explorer 7.0 crash
The test was conducted in an updated Internet Explorer 7.0 a day. Creating a document can be malformed probocar a mistake. The flaw in this method createtextrange already known by everyone. On this occasion fails to create an item with an argument followed by a long and while infinity. By opening...
