212 matches found
EUVD-2025-4877
Malicious code in bioql PyPI...
CVE-2025-58988
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My Tickets: from n/a through = 2.0.22...
PT-2025-36808
Name of the Vulnerable Software and Affected Versions: Joe Dolson My Tickets versions through 2.0.22 Description: The software contains an improper neutralization of input during web page generation, leading to a cross-site scripting XSS issue. This allows for stored XSS attacks. Recommendations:...
CVE-2024-13979
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
CVE-2024-13979
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
CVE-2024-13979
CVE-2024-13979 refers to a SQL injection in the St. Joe ERP System. The vulnerability arises from insufficient input sanitization in the login endpoint, allowing unauthenticated remote attackers to craft HTTP POST requests that manipulate backend SQL queries. Impact per sources: unauthorized data...
CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
PT-2025-34952
Name of the Vulnerable Software and Affected Versions: St. Joe ERP System affected versions not specified Description: A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST...
What happened in Vegas (that you actually want to know about)
Welcome to this week's edition of the Threat Source newsletter. Last week I flew 5,000 miles to Las Vegas for Black Hat USA. After navigating the casino carpet labyrinth and finding the only venue in Nevada that serves a proper English breakfast tea with milk lifesaver, I've decided Black Hat fee...
CVE-2025-22574
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cleanshooter ICS Button ics-button allows Stored XSS.This issue affects ICS Button: from n/a through = 0.6...
CVE-2002-2334
Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users...
CVE-2002-2095
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using 1 index.webroot and 2 index.ipallow...
CVE-2025-32487
Server-Side Request Forgery SSRF vulnerability in Joe Waymark waymark allows Server Side Request Forgery.This issue affects Waymark: from n/a through = 1.5.2...
CVE-2025-32495
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through = 1.5.3...
CVE-2025-32495
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through = 1.5.3...
CVE-2025-26770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through = 1.5.0...
CVE-2025-26770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through = 1.5.0...
CVE-2025-26770 WordPress Waymark plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through = 1.5.0...