268 matches found
GHSA-HCRG-FC28-FCG5
creationtimestamp| type| source ---|---|--- 2025-02-12 18:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113992340797617356...
PT-2025-6186 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection of the issue is mentioned, but no further details are provided about the issue itself. There is a reference to an...
GHSA-QWP8-X4FF-5H87
creationtimestamp| type| source ---|---|--- 2025-02-03 21:08:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113941997439072239...
Chatwork Desktop Application (Windows) uses a potentially dangerous function
Overview Chatwork Desktop Application Windows provided by kubell Co., Ltd. contains an issue with use of potentially dangerous function CWE-676, which allows a user to access an external website via a link in the application. RyotaK of Flatt Security Inc. directly reported this vulnerability to t...
CVE-2024-8977
creationtimestamp| type| source ---|---|--- 2024-10-10 13:24:34+00:00| seen| https://t.me/cvedetector/7576 2024-10-10 15:20:05+00:00| seen| https://t.me/truesecator/6305 2024-10-11 12:24:01+00:00| seen| https://vulnerability.circl.lu/bundle/db9dd42d-746e-40cf-bae6-61042f0c1d48 2026-07-06...
WordPress Bricks Builder Theme 1.9.6 Code Injection
============================================================================================================================================= | Title : WordPress Bricks Builder Theme 1.9.6 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...
PT-2024-30278 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A potential issue has been identified, with a reference to an external link for more information. No details are provided about the nature of th...
PT-2024-27506 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection is mentioned, but no further details are provided about the issue. There is a reference to an external link, but it...
PT-2024-29608 · Opentext · Opentext Filr
Name of the Vulnerable Software and Affected Versions: OpenText Filr versions 24.1.1 through 24.2 Description: A Stored XSS issue has been found, which could prevent users from receiving warnings when clicking on links to external sites. Recommendations: For versions 24.1.1 and 24.2, update to a...
HackerOne: Domain highlighting on External link warning is not working on Chrome & Microsoft Edge browsers on Mobile
The domain highlighting functionality on the External Link Warning interstitial page was not working as intended on the Chrome and Microsoft Edge mobile browsers. The issue was reported to have been previously fixed by HackerOne, but it appears to have resurfaced. The vulnerability could have...
HackerOne: Confirmed #2118458: Intentional redirect from www.hackerone.com to domain which is up for sale
The report describes an intentional redirect from www.hackerone.com to a domain that is currently for sale. The report states that the endpoint https://www.hackerone.com/node/9386 automatically redirects to https://www.iotna.com/, and that the domain iotna.com is currently up for sale...
CVE-2024-30845
Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...
Rainbow external link network disk 安全漏洞
Rainbow external link network disk is a PHP network disk and external link sharing program by netcccyun's personal developer. A security vulnerability exists in Rainbow external link network disk version v.5.5, which stems from a cross-site scripting XSS vulnerability. A remote attacker can execu...
PT-2024-23629 · Rainbow · Rainbow
Name of the Vulnerable Software and Affected Versions: Rainbow external link network disk version 5.5 Description: The issue allows a remote attacker to execute arbitrary code via the validation component of the input parameters. This is a Cross Site Scripting vulnerability. Recommendations: For...
CVE-2024-30845
Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...
CVE-2024-27092 Content spoofing - real Hoppscotch emails
Hoppscotch is an API development ecosystem. Due to lack of validation for fields like Label Edit Team - TeamName, bad actors can send emails with Spoofed Content as Hoppscotch. Part of payload external link is presented in clickable form - easier to achieve own goals by malicious actors. This iss...
CVE-2023-49770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Stored XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...
CVE-2023-49770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Stored XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...
CVE-2023-49771
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Reflected XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...
CVE-2023-49771
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Reflected XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...