CVE-2022-34963

OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS 취약점 설명: OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS에서 News Feed 모듈을 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 저장형 XSS를 악용하기 위해 "news feed"에 무언가를 게시하고 위치 입력란에 XSS 페이로드를 삽입해야 합니다. XSS 페이로드는 제출 직후 실행됩니다. 영향을 받는 대상: http://ipaddress:port/ossn/home POST...

CVE-2022-34961

OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS 취약점 설명: OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS는 Users Timeline 모듈을 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 저장형 XSS를 악용하기 위해 Users Timeline에 게시물을 작성하고 위치 입력란에 XSS 페이로드를 삽입해야 합니다. 제출 직후 XSS 페이로드가 실행됩니다. 영향을 받는 구성 요소:...

CVE-2022-34962

OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS 취약점 설명: OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS에서 그룹 타임라인 모듈을 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 저장형 XSS를 악용하기 위해 그룹 타임라인에 게시물을 올리고 XSS 페이로드를 위치 입력란에 삽입해야 합니다. XSS 페이로드는 제출 직후 실행됩니다. 영향을 받는 대상: http://ipaddress:port/ossn/group/number POST...

CVE-2026-10829

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit...

CVE-2026-10829

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit...

PT-2026-49654

Name of the Vulnerable Software and Affected Versions NPort W2150A-W4/W2250A-W4 Series versions prior to 1.5.1 Description A stack-based buffer overflow occurs due to insufficient input validation of user-supplied input in the Server location parameter on the Basic settings page. An authenticated...

CVE-2022-42100

KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...

EUVD-2022-38858

Malicious code in bioql PyPI...

EUVD-2022-45186

Malicious code in bioql PyPI...

CVE-2022-36136

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...

PT-2024-18831 · WordPress · The Events Manager

Name of the Vulnerable Software and Affected Versions: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions up to, and including, 6.4.7.1 Description: The issue is related to Stored Cross-Site Scripting via the physical location value due to insufficient input...

PYSEC-2024-18

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

whoogle-search Code Issue Vulnerability

whoogle-search is a software application. Self-hosted, ad-free, privacy-respecting meta-search engine A code issue vulnerability exists in versions prior to whoogle-search 0.8.4 that stems from a window endpoint that does not clean up user-supplied input from the location variable and passes it t...

PT-2024-19273 · Unknown · Whoogle Search

Name of the Vulnerable Software and Affected Versions: Whoogle Search versions 0.8.3 and prior Description: Whoogle Search is a self-hosted metasearch engine. The window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method, which sends a GET...

CVE-2022-42100

KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...

CVE-2022-36137

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader...

Cross site scripting

KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...

Cross site scripting

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader...

CVE-2022-36137: Improper Neutralization of Input During Web Page Generation

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader...

CVE-2022-42100: Improper Neutralization of Input During Web Page Generation

KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...