CVE-2021-20323

creationtimestamp| type| source ---|---|--- 2022-03-25 21:30:59+00:00| seen| https://t.me/cibsecurity/39556 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20323.yaml...

CVE-2022-1064

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1...

Sql injection

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1...

CVE-2022-1064

Fork CMS (forkcms/forkcms) is affected by SQL injection in versions prior to 5.11.1, via the ids parameter in blog comments where bulk marking as spam enables injection. The root cause is lack of validation of externally entered SQL statements in that parameter. Consequences stated include potent...

GHSA-4RQQ-RXVC-V2RC Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-24782

Discourse is an open source discussion platform. Versions 2.8.2 and prior in the stable branch, 2.9.0.beta3 and prior in the beta branch, and 2.9.0.beta3 and prior in the tests-passed branch are vulnerable to a data leak. Users can request an export of their own activity. Sometimes, due to catego...

CVE-2022-24782

Discourse versions 2.8.2 and earlier (stable), 2.9.0.beta3 and earlier (beta and tests-passed) are affected by a data‑leak vulnerability where exporting a user’s activity can reveal secure category names. The root cause is exposure of secure category information in exports (and when posts move to...

Sql injection

SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1...

CVE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

CVE-2022-0955 Cross-site Scripting (XSS) - Stored in pimcore/data-hub

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

EUVD-2022-1315

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

CVE-2022-1058 affects Gitea (go-gitea/gitea) versions before 1.16.5. The issue is an open redirect in the login flow that can redirect users to a malicious site via redirect_to, potentially exposing sensitive information or enabling unauthorized actions. The Nuclei template and related advisories...

CVE-2022-1052

CVE-2022-1052 : A heap buffer overflow exists in radare2’s iterate_chained_fixups, affecting versions prior to 5.6.6. The issue is confirmed in multiple sources referencing the same root cause, with CVSS metrics indicating limited local access and potential high impact on availability (CVSS3.1: 5...

CVE-2022-1052

Heap Buffer Overflow in iteratechainedfixups in GitHub repository radareorg/radare2 prior to 5.6.6...

CVE-2022-1052 Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2

Heap Buffer Overflow in iteratechainedfixups in GitHub repository radareorg/radare2 prior to 5.6.6...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository forkcms/forkcms prior to 5.11.1...

CVE-2022-0145 Cross-site Scripting (XSS) - Stored in forkcms/forkcms

Cross-site Scripting XSS - Stored in GitHub repository forkcms/forkcms prior to 5.11.1...

CVE-2022-0145

Fork CMS (forkcms/forkcms) prior to version 5.11.1 is affected by a stored XSS vulnerability. The flaw allows an attacker to inject and have JavaScript execute when a new module is uploaded, via the module description field, with exploitation tied to viewing the Details page after upload. Impact ...