7443 matches found
Cross Site Scripting (XSS)
snipe/snipe-it is vulnerable to Cross Site Scripting XSS. The vulnerability is caused by not sanitizing/escaping asset history values while displaying the values on the browser on the view asset page. An attacker can inject malicious JavaScript while editing assets in the location field leading t...
Snipe-IT Cross-Site Request Forgery Vulnerability
Snipe-IT is an open source IT asset/license management system. A cross-site request forgery vulnerability exists in Snipe-IT versions prior to v.6.2.3, which stems from vulnerability to cross-site request forgery CSRF attacks...
Cross-site Scripting in snipe/snipe-it
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452
Snipe-IT is affected by a stored cross-site scripting (XSS) vulnerability in versions prior to 6.2.2. Public records describe the issue as affecting the location endpoint (and possibly assets) with stored payloads that can execute script when viewed by another user. A PoC exists in 6.2.1 (and rel...
CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
PT-2023-32112 · Unknown · Snipe/Snipe-It
Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.2.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository snipe/snipe-it. Recommendations: For versions prior to 6.2.2, update to version 6.2.2 or later ...
Snipe-IT Cross-Site Scripting Vulnerability
Snipe-IT is an open source IT asset/license management system. A cross-site scripting vulnerability exists in Snipe-IT versions prior to v6.2.2 that stems from the presence of a stored cross-site scripting XSS vulnerability...
it-setup.ro Cross Site Scripting vulnerability OBB-3722371
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
it-art.de Cross Site Scripting vulnerability OBB-3722365
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
it-ind.ru Cross Site Scripting vulnerability OBB-3722367
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Wing Disrupts the Market by Introducing Affordable SaaS Security
Today, mid-sized companies and their CISOs are struggling to handle the growing threat of SaaS security with limited manpower and tight budgets. Now, this may be changing. By focusing on the critical SaaS security needs of these companies, a new approach has emerged that can be launched for $1,50...
Security Bulletin: Cross-Site Scripting Attacks (XSS) on Service Portal
Summary The Service Portal web application delivers data to its users along with other trusted dynamic content, without validating it. The regex-based input HTML replacement may turn sanitized code into un-sanitized code. Vulnerability Details Refer to the security bulletins listed in the...
CVE-2023-40210
Cross-Site Request Forgery CSRF vulnerability in Sean Barton Tortoise IT SB Child List plugin = 4.5 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Sean Barton Tortoise IT SB Child List plugin = 4.5 versions...
Protecting your IT infrastructure with Security Configuration Assessment (SCA)
Security Configuration Assessment SCA is critical to an organization's cybersecurity strategy. SCA aims to discover vulnerabilities and misconfigurations that malicious actors exploit to gain unauthorized access to systems and data. Regular security configuration assessments are essential in...
CVE-2023-40210 WordPress SB Child List Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Sean Barton Tortoise IT SB Child List plugin = 4.5 versions...