Lucene search
K

21 matches found

Packet Storm News
Packet Storm News
added 2026/04/09 12:0 a.m.0 views

Why Network Segmentation Projects Fail

Network segmentation is a foundational enterprise security control. Despite its recognized benefits, segmentation initiatives frequently fail in practice, and the field lacks a systematic empirical explanation for why these projects do not achieve their intended outcomes. This paper presents an...

5.8AI score
Exploits0
NVD
NVD
added 2026/02/18 2:16 p.m.1 views

CVE-2025-8308

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Key Software Solutions Inc. INFOREX- General Information Management System allows XSS Through HTTP Headers. This issue affects INFOREX- General Information Management System: from 2025 and...

6.3CVSS0.00045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/18 1:40 p.m.2 views

CVE-2025-8308 Reflected XSS in Key Software's INFOREX

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Key Software Solutions Inc. INFOREX- General Information Management System allows XSS Through HTTP Headers. This issue affects INFOREX- General Information Management System: from 2025 and...

6.3CVSS5.4AI score0.00045EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-51599

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.04632EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.3 views

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

6.5CVSS7.6AI score0.00072EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.4 views

PT-2025-17693 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly mentioned. There is no information about the estimated number of potentially affected devices worldwide or details about real-world...

6.3AI score
Exploits0References4
OSV
OSV
added 2025/01/30 1:25 p.m.6 views

CGA-XPQG-QPGW-7CGV

Bulletin has no description...

3.7CVSS5.4AI score0.00144EPSS
Exploits0
OSV
OSV
added 2025/01/13 5:15 p.m.2 views

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

6.5CVSS7.5AI score0.00072EPSS
Exploits1References2
NVD
NVD
added 2025/01/13 5:15 p.m.7 views

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

6.5CVSS0.00072EPSS
Exploits1References2
CVE
CVE
added 2025/01/13 12:0 a.m.21 views

CVE-2024-54999

MonicaHQ v4.1.2 is affected by a Client-Side Injection vulnerability in the General Information module, exploitable via the last_name parameter. The CVE documents indicate low impact to confidentiality and integrity (C:L, I:L) with no availability impact, and no patch/version fix is specified. A ...

6.5CVSS7.7AI score0.00072EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2, which stems from the presence of client-side injection initiated via the lastname parameter in the General Information module...

6.5CVSS7AI score0.00072EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/01/13 12:0 a.m.8 views

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

0.00072EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.3 views

PT-2025-3089 · Monicahq · Monicahq

Name of the Vulnerable Software and Affected Versions: MonicaHQ version 4.1.2 Description: The issue is a Client-Side Injection vulnerability via the last name parameter in the General Information module. This vulnerability can be exploited. Recommendations: For MonicaHQ version 4.1.2, as a...

6.5CVSS7.3AI score0.00072EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/01/13 12:0 a.m.4 views

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

6.6AI score0.00072EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-27760

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

5.5CVSS5.1AI score0.00014EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-26768 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

5.6CVSS6AI score0.00072EPSS
Exploits0References26
NVD
NVD
added 2023/11/09 6:15 a.m.9 views

CVE-2023-47488

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attribmanagerid parameter in the General Information page and the id parameter in the contact page...

6.1CVSS0.04632EPSS
Exploits0References3
Prion
Prion
added 2023/11/09 6:15 a.m.14 views

Cross site scripting

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attribmanagerid parameter in the General Information page and the id parameter in the contact page...

5.8CVSS5.9AI score0.04632EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/09 12:0 a.m.13 views

CVE-2023-47488

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attribmanagerid parameter in the General Information page and the id parameter in the contact page...

6AI score0.04632EPSS
Exploits0References3
OSV
OSV
added 2018/09/06 11:29 p.m.1 views

CVE-2018-12234

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter...

6.1CVSS5.8AI score0.0477EPSS
Exploits5References4
Rows per page
Query Builder