90 matches found
CVE-2025-10029
A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The...
CVE-2025-10029 itsourcecode POS Point of Sale System complex_header_2.php cross site scripting
A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The...
CVE-2025-10029
The CVE concerns itsourcecode POS Point of Sale System 1.0. A cross‑site scripting vulnerability exists in the file /inventory/main/vendors/datatables/unit_testing/templates/complex_header_2.php. Manipulating the scripts argument can inject arbitrary web script/HTML, with remote exploit potential...
CVE-2025-10029 itsourcecode POS Point of Sale System complex_header_2.php cross site scripting
A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The...
CVE-2025-7567
The CVE-2025-7567 issue affects the ShopXO web application up to version 6.5.0, specifically involving the header.html processing where manipulating the lang/system_type parameter enables Cross-Site Scripting (XSS). The vulnerability can be triggered remotely, and publicly disclosed exploits exis...
PT-2025-29414 · Shopxo · Shopxo
Name of the Vulnerable Software and Affected Versions: ShopXO versions up to 6.5.0 Description: A cross-site scripting issue exists due to the manipulation of the lang/system type parameter in the processing of the header.html file. The attack can be initiated remotely. The exploit has been...
Vulnerability of components in page.h and init.c of the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the page.h and init.c components in the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2020-25092
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in parts/header.php, within application/views/templates/clothesshop, application/views/templates/greenlabel, and application/views/templates/redlabel...
The vulnerability relates to the definition of the `f2fs_fault_info{}` structure in the `fs/f2fs/f2fs.h` module of the Linux file system support module for F2FS kernels. This vulnerability allows an attacker to access protected information or cause service failures.
The vulnerability related to the definition of the f2fsfaultinfo structure in the fs/f2fs/f2fs.h module of the Linux file system support module f2FS is associated with code errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5 a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.
...
Outlook Web App (OWA) / Client Access Server (CAS) IIS HTTP Internal IP Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Outlook Web App OWA / Client Access Server CAS IIS HTTP Internal IP Disclosure', 'Description' = %q This module tests vulnerable IIS HTTP header...
ROS-20240712-01
Vulnerability in Multiline RFC 2231 component of Exim mail server is related to incorrect analysis of the the multiline RFC 2231 header file name. Exploitation of the vulnerability could allow an attacker, acting remotely, to deliver executable attachments to end-user mailboxes...
PT-2024-4252 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: UPX versions up to 4.2.2 Description: A critical issue affects the get ne64 function of the bele.h file, leading to a heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The vendor was contacted early abo...
PT-2023-30731 · Unknown · Gaatitrack Courier Management System
Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to inject JavaScript via the page parameter to "login.php" or "header.php". This could potentially lead to unauthorized...
PT-2023-29213 · Unknown · Online Art Gallery
Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add3 parameter of the header.php resource does not validate the characters received, and they are sent...
PT-2023-28957 · Unknown · Online Art Gallery
Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the fnm parameter of the header.php resource does not validate the characters received, and they are sent...
PT-2023-29181 · Unknown · Online Art Gallery
Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the gender parameter of the header.php resource does not validate the characters received and they are sent...
zchunk Input Validation Error Vulnerability
zchunk is a compressed file format from zchunk open source. A security vulnerability exists in zchunk that stems from multiple integer overflows in lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. The vulnerability is caused by the presence of an integer overflow in the...
WordPress Plugin Widgets for Google Reviews Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
