12 matches found
CVE-2023-49152
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labs64 Credit Tracker allows Stored XSS.This issue affects Credit Tracker: from n/a through 1.1.17...
EUVD-2024-45873
Malicious code in bioql PyPI...
EUVD-2023-53157
Malicious code in bioql PyPI...
CVE-2024-52378
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through = 0.3.0...
CVE-2024-52378
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through = 0.3.0...
CVE-2024-52378
CVE-2024-52378 concerns the Labs64 DigiPass WordPress plugin. The connected records confirm an Absolute Path Traversal vulnerability in DigiPass versions
CVE-2024-52378 WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through = 0.3.0...
PT-2024-35215 · Labs64 · Digipass
Name of the Vulnerable Software and Affected Versions: DigiPass versions 0.3.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows Absolute Path Traversal in Labs64 DigiPass. Recommendations:...
CVE-2023-49152
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labs64 Credit Tracker allows Stored XSS.This issue affects Credit Tracker: from n/a through 1.1.17...
CVE-2023-49152
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labs64 Credit Tracker allows Stored XSS.This issue affects Credit Tracker: from n/a through 1.1.17...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labs64 Credit Tracker allows Stored XSS.This issue affects Credit Tracker: from n/a through 1.1.17...
CVE-2023-49152
CVE-2023-49152 affects Labs64 WordPress Credit Tracker (Credit Tracker plugin) up to version 1.1.17. Root cause: improper neutralization of input during web page generation, enabling Stored XSS. Impact: stored cross-site scripting could affect users accessing injected content; CVSS v3.1 base scor...