3550 matches found
CVE-2020-35973
An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /user/manage.php...
zzcms zzcms 跨站脚本漏洞
ZZCMS is the content management system of Webmaster Merchants. A cross-site scripting vulnerability exists in /user/manage.php in ZZCMS version 2020. An attacker can exploit this vulnerability to insert and execute arbitrary JS code...
CVE-2021-32646
Roomer is a discord bot cog extension which provides automatic voice channel generation as well as private voice and text channels. A vulnerability has been discovered allowing discord users to get the manage channel permissions in a private VC they have joined. This allowed them to make changes ...
CVE-2021-32646
Roomer is a discord bot cog extension which provides automatic voice channel generation as well as private voice and text channels. A vulnerability has been discovered allowing discord users to get the manage channel permissions in a private VC they have joined. This allowed them to make changes ...
[SECURITY] Fedora 33 Update: runc-1.0.0-378.rc95.fc33
The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...
Pluck CMS 4.7.13 - File Upload Remote Code Execution (Authenticated)
Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated Date: 25.05.2021 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://github.com/pluck-cms/pluck Software Link: https://github.com/pluck-cms/pluck/releases/tag/4.7.13 Version: 4.7.13 Tested on Xubuntu 20.0...
The vulnerability of the “Manage Requisition Status” component in the Oracle PeopleSoft Enterprise SCM eProcurement application allows a hacker to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the “Manage Requisition Status” component in the Oracle PeopleSoft Enterprise SCM eProcurement application is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...
CVE-2020-21345
Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...
Cross site scripting
Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...
CVE-2020-21345
Halo 1.1.3 contains a Cross Site Scripting (XSS) vulnerability in the post publish components of the manage panel, allowing a remote attacker to execute arbitrary code. The available documents confirm the affected product/version and the XSS impact but do not provide detailed root-cause analysis,...
5 #TrendTips for Lifecycle Security for Containers
Learn how to manage all of the moving parts when implementing pre-runtime and runtime container security...
[SECURITY] Fedora 33 Update: runc-1.0.0-377.rc93.fc33
The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...
CVE-2021-2220
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2021-2220
Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
BlackCat CMS 1.3.6 - (Multiple) Stored Cross-Site Scripting (XSS) Vulnerability
Exploit Title: BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting XSS Exploit Author: Ömer Hasan Durmuş Vendor Homepage: https://blackcat-cms.org/ Software Link: https://blackcat-cms.org/page/download.php Version: BlackCat CMS - 1.3.6 Step 1 : Login to admin account in...
BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS)
Exploit Title: BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting XSS Date: 04/07/2021 Exploit Author: Ömer Hasan Durmuş Vendor Homepage: https://blackcat-cms.org/ Software Link: https://blackcat-cms.org/page/download.php Version: BlackCat CMS - 1.3.6 Step 1 : Login to admin account in...
CVE-2021-20078
Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...
CVE-2021-20078
Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...
CVE-2021-20078
CVE-2021-20078 affects ManageEngine OpManager (builds below 125346). A path traversal flaw in the spark gateway component enables remote denial of service by deleting arbitrary directories on the OS. Multiple connected sources (Red Hat, CNVD, CVE registries) confirm the same description; no explo...
CVE-2021-20078
Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...