83 matches found
CVE-2025-10388
A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /api/course/enroll-course of the component Create New Course Basic Settings. Such manipulation of the argument Description leads to cross site scripting. The attack can be launched...
CVE-2025-10388
A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /api/course/enroll-course of the component Create New Course Basic Settings. Such manipulation of the argument Description leads to cross site scripting. The attack can be launched...
CVE-2025-10388 Selleo Mentingo Create New Course Basic Settings enroll-course cross site scripting
A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /api/course/enroll-course of the component Create New Course Basic Settings. Such manipulation of the argument Description leads to cross site scripting. The attack can be launched...
CVE-2025-10388
The CVE-2025-10388 vulnerability concerns Selleo Mentingo version 2025.08.27. Affected component: Create New Course Basic Settings, specifically the /api/course/enroll-course endpoint. Root cause: manipulation of the Description argument leading to cross-site scripting (XSS). The issue can be exp...
CVE-2025-10388 Selleo Mentingo Create New Course Basic Settings enroll-course cross site scripting
A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /api/course/enroll-course of the component Create New Course Basic Settings. Such manipulation of the argument Description leads to cross site scripting. The attack can be launched...
Selleo Mentingo 代码注入漏洞
Selleo Mentingo is an in-house training and employee development platform from Selleo Poland. A code injection vulnerability exists in Selleo Mentingo version 2025.08.27, which stems from an incorrect manipulation of the parameter Description in the file /api/course/enroll-course, which could lea...
PT-2025-37398
Name of the Vulnerable Software and Affected Versions: Selleo Mentingo version 2025.08.27 Description: A cross-site scripting issue exists due to manipulation of the Description argument in the processing of the /api/course/enroll-course endpoint within the Create New Course Basic Settings...
CVE-2025-32347
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2021-47121
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: caif: fix memory leak in cfusbldevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simpl...
Linux Distros Unpatched Vulnerability : CVE-2021-47122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caifdevicenotify In case of caifenrolldev fail, allocated...
CVE-2024-5371
A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submitenrollstudent.php. The manipulation of the argument classname leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2024-51720 Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication SCA Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number...
PT-2024-39260 · Rubygems +3 · Devise-Two-Factor +3
Name of the Vulnerable Software and Affected Versions: Devise-Two-Factor versions 1.0.0 or = 2.2.0 through = 2.2.0 through 6.0.0, upgrade to version v6.0.0 as soon as possible. If upgrading is not possible, override the default otp secret length attribute in the model when configuring two factor...
The vulnerability of the Windows Enroll Engine component in Windows operating systems allows a hacker to bypass security restrictions.
The vulnerability of the Windows Enroll Engine component in Windows operating systems is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...
CVE-2024-38069
Windows Enroll Engine Security Feature Bypass Vulnerability...
CVE-2024-38069
Windows Enroll Engine Security Feature Bypass Vulnerability...
CVE-2024-38069
Technical details about CVE-2024-38069 (Windows Enroll Engine Security Feature Bypass) are not provided in the connected documents. The initial description is generic; no affected products/versions or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2024-38069 Windows Enroll Engine Security Feature Bypass Vulnerability
...
