GHSA-JMQM-F8Q4-V7WX LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment

Summary LegacyController.php:75 writes the page title into a document.title JS assignment using string interpolation. apps/proxmox.inc.php pushes $vars'instance' and $vars'vmid' GET params, only striptags applied directly into $pagetitle. A single quote terminates the JS string, executing arbitra...

CVE-2021-43673

dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...

Cross site scripting

dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...

PHP 7.0 - JsonSerializable::jsonSerialize json_encode Local Denial of Service

Exploit for php platform in category dos / poc 0day.today 2018-04-10...

PHP 7.0 - JsonSerializable::jsonSerialize json_encode Local Denial of Service

PHP 7.0 - JsonSerializable::jsonSerialize jsonencode Local Denial of Service...

PHP 7.0 - JsonSerializable::jsonSerialize json_encode Local Denial of Service

...

Internet Bug Bounty: Integer Overflow/Heap Overflow in json_encode()/json_decode()

https://bugs.php.net/bug.php?id=72275...