Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2024/08/05 9:29 p.m.•73 views

GHSA-WV8X-3W6R-6H7V gotortc Cross-site Scripting vulnerability

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS5.9AI score0.00447EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2024/08/05 9:29 p.m.•36 views

gotortc Cross-site Scripting vulnerability

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS6.3AI score0.00447EPSS
SaveExploits1References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2024/08/05 12:00 a.m.•53 views

gotortc Cross-site Scripting vulnerability

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS6.3AI score0.00447EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2024/04/05 6:56 a.m.•23 views

Cross-Site Scripting (XSS)

github.com/alexxit/go2rtc is vulnerable for Cross-Site Scripting XSS. The vulnerability due to the links.html page appending the src GET parameter in all of its links for 1-click previews, where the context of appending is innerHTML, leading to the insertion of the text as HTML which results in X...

6.1CVSS6.2AI score0.00447EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/04/04 2:52 p.m.•7 views

CVE-2024-29191

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page "links.html" appends the "src" GET parameter "0" in all of its links for 1-click previews. The context in which "src" is being appended is "innerHTML" "1", which wi...

6.1CVSS0.00447EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/04 12:00 a.m.•6 views

CVE-2024-29191: Improper Neutralization of Input During Web Page Generation

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS5.4AI score0.00447EPSS
SaveExploits1References2
Rows per page
Query Builder