3484 matches found
Microsoft Exchange and Verkada Hacks: Isolate Your Apps and APIs from the Internet Cesspool
It's been an interesting start to March in terms of public security incidents. This month kicked off with multiple zero-day exploits being used to attack on-premises versions of Microsoft Exchange Server. And, as if that wasn't enough, that attack was quickly followed by the news that a hacktivis...
CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS...
CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS...
CVE-2020-35328
CVE-2020-35328 affects the Courier Management System 1.0. A stored cross-site scripting (XSS) vulnerability is reported in the First Name field of the application. Public references include an Exploit-DB entry, indicating exploitation awareness, but the provided documents do not give explicit exp...
Courier Management System 跨站脚本漏洞
SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...
Monica cross-site scripting vulnerability (CNVD-2021-12658)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
Out of My Depth (Where I Belong)
I remember well my first day as a member of Akamai's InfoSec department. The Friday prior, I'd just completed the Akamai Technical Academy, a five-month crash-course in all things tech, and was now, on a cold but sunny Monday morning, joining InfoSec for their weekly staff meeting. Eager to make ...
6 strategies to reduce cybersecurity alert fatigue in your SOC
Today, organizations are faced with the increasingly difficult task of trying to protect their expanding digital estate from sophisticated cybersecurity threats. Migration to the cloud and a mobile workforce has dissolved the network boundary and projected the digital estate beyond its traditiona...
Glovo: Server Side Template Injection on Name parameter during Sign Up process
Summary: Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a template, which is then executed server-side. In this scenario, when an attacker signs up on the platform and uses a payload in the First Name field, the payload ...
CVE-2020-8355
An internal product security audit of Lenovo XClarity Administrator LXCA prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture FFDC service log if the service log is...
PT-2021-7763 · Unknown · Nucleus Net +7
Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET versions prior...
CVE-2020-28388
A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...
CVE-2020-36115
Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...
CVE-2020-36115
Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...
EGavilan Media CRUD Operation Cross-Site Scripting Vulnerability
EGavilan Media CRUD Operation is a Php-based website builder from EGavilan Media. A cross-site scripting vulnerability exists in EGavilan Media CRUD Operation, which originates from the "Add New Record Function" via the First Name or Last Name parameter...