10 matches found
PT-2026-56897
Name of the Vulnerable Software and Affected Versions Hoppscotch versions prior to 2026.6.0 Description The updateInfraConfigs GraphQL mutation in admin/infra.resolver.ts accepts an attacker-controlled MAILER SMTP URL value. Additionally, the validateSMTPUrl function in utils.ts permits path,...
EUVD-2021-10855
Malware in sbrugna...
CVE-2021-23933
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03044)
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via...
CVE-2021-23933
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
Design/Logic Flaw
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
CVE-2021-23933
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
CVE-2021-23933
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
PT-2021-15619
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.5 Description: The issue allows for XSS via JavaScript in a Note referenced by a mail:// URL. Recommendations: For OX App Suite versions prior to 7.10.5, update to version 7.10.5 or later to resolve the iss...
