CVE-2020-35262

Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...

CVE-2020-25498

Cross Site Scripting XSS vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter...

CVE-2020-35262

Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...

CVE-2020-35262

CVE-2020-35262 affects Digisol DG-HR3400 with a Cross Site Scripting (XSS) vulnerability exploitable via the NTP configuration server name in the Time and date module and the Keyword field in URL Filter. Public details and CVSS metrics in NVD indicate a network-exploitable flaw (CVSS v3.1 base sc...

Beetel router 777VR1 cross-site scripting vulnerability

Beetel 777VR1 is a router from Beetel. A cross-site scripting vulnerability exists in the Beetel router 777VR1, which is caused by an NTP server name in system time and a "keyword" in the URL filter...

PT-2021-11740

Name of the Vulnerable Software and Affected Versions: Digisol DG-HR3400 affected versions not specified Description: The issue is a Cross Site Scripting XSS vulnerability that can be exploited via the NTP server name in the Time and date module and the Keyword in the URL Filter. This allows for...

PT-2021-11145

Name of the Vulnerable Software and Affected Versions: Beetel router 777VR1 Description: A Cross Site Scripting XSS issue can be exploited via the NTP server name in System Time and the Keyword in URL Filter. Recommendations: For Beetel router 777VR1, as a temporary workaround, consider restricti...

cxuucms SQL Injection Vulnerability

Cxuucms is a PHP-based content relationship building system. cxuucms v3 suffers from a SQL injection vulnerability that originates from leaking all database data via search.php via the keyword parameter. No detailed vulnerability details are available at this time...

Cxuucms SQL注入漏洞

Cxuucms is a PHP-based content relationship building system. cxuucms v3 suffers from a SQL injection vulnerability that originates from leaking all database data via search.php via the keyword parameter. No detailed vulnerability details are available at this time...

VEF

This is a Vulnerability Exploitation Framework VEF repository, which is a collection of tools and scripts for exploiting vulnerabilities in various systems and applications. The framework is written in Python and utilizes various APIs from different vulnerability databases, including Censys, Fofa...

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

SQL Injection

sails-mysql is vulnerable to SQL injection. The sort keyword is not properly sanitized and may allow attackers to inject SQL statements and execute arbitrary SQL queries...

PT-2020-21352

Name of the Vulnerable Software and Affected Versions sails-mysql versions prior to 0.10.8 Description The issue is related to SQL Injection due to improper sanitization of the sort keyword, allowing attackers to inject SQL statements and execute arbitrary SQL queries. Recommendations Upgrade to...

Cross site scripting

A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...

CVE-2019-6112

A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...

CVE-2019-6112

A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...

CVE-2019-6112: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...

PT-2020-11192

Name of the Vulnerable Software and Affected Versions Sell Media plugin version 2.4.1 for WordPress Description A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the keyword parameter also known as $search term or the Search field in the...

PT-2020-21865

Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a bad-cast in the Sass parser, specifically when parsing IE keyword arguments. The crash occurs due to an incorrect cast from Sass::Unary Expression to Sass::PreValue. Th...