Cross site scripting

Cross SIte Scripting XSS vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor the file suffix is allowed...

CVE-2021-42228

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

CVE-2021-42227

CVE-2021-42227 describes a cross‑site scripting (XSS) vulnerability in KindEditor 4.1.x . The weakness is triggered via the editor’s upload flow, specifically related to the file handling in the upload context (e.g., an upload_json.php path) and exposure through a Google search result pointing to...

CVE-2021-42228: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

PT-2021-23564

Name of the Vulnerable Software and Affected Versions KindEditor version 4.1.x Description A Cross Site Request Forgery CSRF issue exists, allowing attackers to trick users into clicking malicious links by uploading an HTML file containing CSRF code on a website using the editor. This can be done...

io.kubernetes:client-java-examples (1.0.0-beta3) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (1.0.0-beta3)

io.kubernetes:client-java MAVEN version 1.0.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 1.0.0-beta3 Source cves: CVE-2021-25738 Source advisory:...

io.kubernetes:client-java-examples (3.0.0-beta2) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (3.0.0-beta2)

io.kubernetes:client-java MAVEN version 3.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 3.0.0-beta2 Source cves: CVE-2021-25738 Source advisory:...

io.kubernetes:client-java-examples (8.0.0-alpha1), io.kubernetes:client-java-extended (8.0.0-alpha1) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (8.0.0-alpha1)

io.kubernetes:client-java MAVEN version 8.0.0-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 8.0.0-alpha1 - io.kubernetes:client-java-extended 8.0.0-alpha1 Sour...

io.kubernetes:client-java-examples (9.0.3), io.kubernetes:client-java-extended (9.0.3) +1 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (9.0.3)

io.kubernetes:client-java MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 9.0.3 - io.kubernetes:client-java-extended 9.0.3 -...

io.kubernetes:client-java-examples (1.0.0-beta1) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (1.0.0-beta1)

io.kubernetes:client-java MAVEN version 1.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 1.0.0-beta1 Source cves: CVE-2021-25738 Source advisory:...

cloud.nimburst:tug (0.1.0), io.kubernetes:client-java-examples (1.0.0-beta4) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (1.0.0-beta4)

io.kubernetes:client-java MAVEN version 1.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - cloud.nimburst:tug 0.1.0 - io.kubernetes:client-java-examples 1.0.0-beta4 Source cves: CVE-2021-25738...

io.kubernetes:client-java-examples (2.0.0-beta2) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (2.0.0-beta2)

io.kubernetes:client-java MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 2.0.0-beta2 Source cves: CVE-2021-25738 Source advisory:...

io.kubernetes:client-java-examples (4.0.0-beta1) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (4.0.0-beta1)

io.kubernetes:client-java MAVEN version 4.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 4.0.0-beta1 Source cves: CVE-2021-25738 Source advisory:...

io.kubernetes:client-java-examples (2.0.0-beta1) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (2.0.0-beta1)

io.kubernetes:client-java MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 2.0.0-beta1 Source cves: CVE-2021-25738 Source advisory:...

io.kubernetes:client-java-examples (1.0.0-beta2) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (1.0.0-beta2)

io.kubernetes:client-java MAVEN version 1.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 1.0.0-beta2 Source cves: CVE-2021-25738 Source advisory:...

io.kubernetes:client-java-examples (9.0.1), io.kubernetes:client-java-extended (9.0.1) +1 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (9.0.1)

io.kubernetes:client-java MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 9.0.1 - io.kubernetes:client-java-extended 9.0.1 -...

com.github.galigator.openllet:openllet-cli (>=2.6.2, <=2.6.3), com.github.galigator.openllet:openllet-examples (>=2.6.2, <=2.6.3) +79 more potentially affected by CVE-2021-39239 via org.apache.jena:jena-core (3.4.0)

org.apache.jena:jena-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jena:jena-core and may be impacted: - com.github.galigator.openllet:openllet-cli =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =1.0.0, =1.0.0, =1.0.2 -...

Exploit for Path Traversal in Microsoft

〖EXP〗Ladon CVE-2021-40444 Office Vulnerability Reimplementatio...

com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo (3.0.0), com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (3.0.0) +13 more potentially affected by CVE-2021-37137 via io.netty:netty (3.5.10.final)

io.netty:netty MAVEN version 3.5.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo 3.0.0 - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex 3.0.0 ...

org.neo4j.app:neo4j-server (1.9.m01), org.neo4j.app:neo4j-server-advanced (1.9.m01) +5 more potentially affected by CVE-2021-34371 via org.neo4j:neo4j (1.9.m01)

org.neo4j:neo4j MAVEN version 1.9.m01 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 1.9.m01 - org.neo4j.app:neo4j-server-advanced 1.9.m01 - org.neo4j.app:neo4j-server-enterprise 1.9.m0...