EUVD-2024-36774

Malicious code in bioql PyPI...

CVE-2024-37624

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the /chajian/inputChajian.php. component...

CVE-2024-37624

CVE-2024-37624 concerns Xinhu RockOA v2.6.3 with a reflected XSS vulnerability exploitable via /chajian/inputChajian.php. According to NVD, CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N; base score 6.1 (MEDIUM). No explicit exploitation details are provided beyond a potential PoC referenc...

CVE-2024-37624: Improper Neutralization of Input During Web Page Generation

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the /chajian/inputChajian.php. component...

CVE-2024-37624

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the /chajian/inputChajian.php. component...

PT-2024-27681

Name of the Vulnerable Software and Affected Versions Xinhu RockOA version 2.6.3 Description A reflected cross-site scripting XSS issue was found in Xinhu RockOA. The issue is related to the /chajian/inputChajian.php component. Recommendations For Xinhu RockOA version 2.6.3, consider restricting...