Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An incorrect security UI vulnerability exists in Page Info in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to spoof t...

komotel.myftp.info Cross Site Scripting vulnerability OBB-1452666

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security Bulletin: Multiple IBM InfoSphere Information Server components are affected by a vulnerability in IBM Dojo Toolkit (CVE-2014-8917)

Summary Multiple components of IBM InfoSphere Information Server may be affected by an XSS vulnerability in IBM Dojo Toolkit. Vulnerability Details CVE-ID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

radare2 'libr/core/cmd_info.c' remote denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'cmdinfo' function in the libr/core/cmdinfo.c file in radare2 version 1.5.0. A remote attacker can exploit this vulnerability to cause a denial of service reuse after release and...

CVE-2014-0778 Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor

TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance...

DEBIAN-CVE-2007-4483

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2000-1001

CVE-2000-1001 affects Element InstantShop: the add_2_basket.asp endpoint allows remote attackers to modify price information via the hidden form variable price. The underlying issue is input/data integrity on the price field, enabling tampering before processing. The CVSS data assigns a base scor...