4377 matches found
CVE-2023-3588 Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x
A stored Cross-site Scripting XSS vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code...
CVE-2023-3588
CVE-2023-3588 is a stored Cross-site Scripting (XSS) vulnerability in Teamwork Cloud from No Magic, affecting Release 2021x through Release 2022x. The issue allows an attacker to execute arbitrary script code in the context of the affected web interface. Affected component is the Teamwork Cloud w...
CVE-2023-3588 Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x
A stored Cross-site Scripting XSS vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code...
PT-2023-25359 · No Magic · Teamwork Cloud
Name of the Vulnerable Software and Affected Versions: Teamwork Cloud versions No Magic Release 2021x through No Magic Release 2022x Description: A stored Cross-site Scripting XSS issue allows an attacker to execute arbitrary script code. Recommendations: For versions No Magic Release 2021x throu...
No Magic TeamworkCloud Cross-Site Scripting Vulnerability
No Magic TeamworkCloud is a storage management software for collaborative development and version model storage from No Magic, Inc. The software provides a web-based management interface that offers features such as managing user accounts, access control, LDAP integration, secure connections and...
CVE-2023-3588: Improper Neutralization of Input During Web Page Generation
A stored Cross-site Scripting XSS vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code...
Exploit for Type Confusion in Macs_Cms_Project Macs_Cms
CVE-2023-43154 - Macs Framework v1.1.4f CMS Type Confusion Vul...
CVE-2021-26504
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
CVE-2021-26504
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
CVE-2021-26504
CVE-2021-26504 affects Foddy’s node-red-contrib-huemagic (v3.0.0). The vulnerability is a directory traversal in the hue-magic.js res.sendFile API, enabling remote attackers to read sensitive information. CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, and no pr...
Unrestricted Upload File leads to Remote Code Execution
Description The upload file function is vulnerable that user can upload the file with other extensions .php, .phps, ... by using Magic Bytes technique. However, the .htaccess has almost prevented all the files with extensions such as php, phps, phtml, ... The attacker still can upload the hphp fi...
magic-spielen.de Cross Site Scripting vulnerability OBB-3557110
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-35913
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 1 crash type. The crash state involves several functions: wwunpack, cli scanpe, and cli magic scan. No...
WordPress WooRocks Magic Content Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)
Software WooRocks Magic Content Type Plugin Vulnerable versions = 1.0.17 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1fd587f00a62 Credits Rafie Muhammad Patchstack...
WordPress Magic Content for Siteorigins Pagebuilder Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Magic Content for Siteorigins Pagebuilder Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1d6f9ff0175d Credits Rafie...
PT-2023-25792
Name of the Vulnerable Software and Affected Versions ProfileGrid plugin for WordPress versions up to, and including, 5.5.1 Description The issue is related to a missing capability check on the profile magic check smtp connection function, allowing authenticated attackers with subscriber-level...
WordPress Magic Login API Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
Software Magic Login API Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6d2c95bc7776 Credits Rafie Muhammad Patchstack Required...
magic-square.ru Cross Site Scripting vulnerability OBB-3478318
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Binary Vulnerability in Magic R365 of Xinhua San Technologies Limited (CNVD-2023-62724)
The Magic R365 is a full gigabit wireless router. A binary vulnerability exists in the Magic R365 from Xinhua San Technologies, which can be exploited by attackers to execute arbitrary commands...