19 matches found
strelka-ui
Releasesrelease | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense La Strelka Web UI è un frontend per l'invio di file basato su browser e API per l...
CVE-2026-53435
In Jenkins versions 2.567 and earlier, and LTS 2.555.2 and earlier, a deserialization vulnerability exists in the XStream library . Attackers can submit a specially crafted config.xml file to trigger the deserialization of arbitrary types from the Jenkins core or plugins. This allows an attacker ...
EUVD-2007-0562
Malware in sbrugna...
EUVD-2021-12188
Malware in sbrugna...
mblog security vulnerabilities
mblog is a blogging system by langhsu individual developer. A security vulnerability exists in mblog 3.5.0 and earlier versions, which originates from a cross-site scripting attack due to incorrect manipulation of the content/title parameter in file/post/submit...
CVE-2021-25277
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component...
Code injection
This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context...
CVE-2021-25277
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component...
Session fixation
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component...
CVE-2021-25277
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component...
CVE-2021-25277
CVE-2021-25277 affects FTAPI versions 4.0–4.10. The issue is a cross-site scripting (XSS) vulnerability triggered by a crafted filename that is processed in the file submission component’s alternative text hover box. The root cause is improper handling of filename input in the hover text renderin...
CVE-2021-25277
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component...
PT-2021-16498
Name of the Vulnerable Software and Affected Versions: FTAPI versions 4.0 through 4.10 Description: The issue allows for XSS via a crafted filename to the alternative text hover box in the file submission component. Recommendations: For FTAPI versions 4.0 through 4.10, consider restricting the us...
CVE-2021-25277: Improper Neutralization of Input During Web Page Generation
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component...
FTAPI Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in FTAPI 4.0 - 4.10, which allows the passage of a crafted filename to an alternate text hover box in the file submission component...
Web Shell Detector - PHP Script That Helps You Find And Identify PHP / CGI (Perl) / ASP / ASPX Shells
Web Shell Detector is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has a light weight and...
Session fixation
Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...
For iis write permissions of use-vulnerability warning-the black bar safety net
We may have seen the remote analysis of IIS settings, which iis a variety of settings for the analysis, I here for iis write permissions to the analysis, the following reference to the remote analysis of IIS Settings article for iis write permissions to the analysis of the content: Write...
