125 matches found
CVE-2013-1140
The XML parser in Cisco Security Monitoring, Analysis, and Response System MARS allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCue55093...
MAL-2025-4080 Malicious code in gatsby-mars-pet-parent-journey--server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70efb29ad6f2b4da2940934e2b50c20f30c3798c9a7a20da6affc3479f343133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mars: RXSS on ██████ via customerId parameter
A Reflected Cross-Site Scripting XSS vulnerability was identified on the Mars website at ██████. The vulnerability was located in the customerId parameter, which was inadequately sanitized before being reflected back to users in the HTTP response. When the parameter was manipulated with malicious...
Mars: massive PII leakage for ███████
The report identified a security vulnerability in the visitor management system mwcvisitor.royalcanin.com.cn that exposed a log file containing personally identifiable information PII of users. The log file was directly accessible through a public URL without any authentication, allowing...
Malicious code in mars-rover_alvin (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6988 Malicious code in mars-rover_alvin (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Mars: Sqli on ██████ search functionality
A SQL injection vulnerability was reported on the search functionality of the ██████ website. The vulnerability allowed an attacker to inject malicious SQL code into the search query...
Mars: sqli on █████████ search functionality
A SQL injection vulnerability was found in the search functionality of the █████████ website...
Fedora: Security Advisory for Mars (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: Mars-4.5-26.fc40
MARS is a lightweight interactive development environment IDE for programming in MIPS assembly language, intended for educational-level use with Patterson and Hennessy's Computer Organization and Design...
Mars: Reflected xss on ████████
The ████████ website was vulnerable to a reflected Cross-Site Scripting XSS vulnerability. The vulnerability was caused by the improper neutralization of user-supplied input within the 's' parameter, which was then reflected in the application's response without proper sanitization or encoding...
Mars: Unrestricted File Upload at ██████████
The endpoint "████████" enabled unrestricted file uploads, allowing anyone to upload any type of file without registration...
Mars: Account takeover using reset password link
A vulnerability was found in the Mars website where the reset password functionality could be manipulated. The reset password link sent via email contained a parameter that specified the path of the reset password page. An attacker could modify this parameter to redirect users to a domain under...
Mars: Sensitive Information Exposed at █████
Sensitive information was exposed in a JavaScript file, revealing configuration details, credentials, and file paths related to the deployment of a JavaScript application. This could enable unauthorized access to sensitive data...
iesmarserena.es Improper Access Control vulnerability OBB-3822310
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mars: Critical Unauthenticated Access to Sensitive Employee and Customer Data Including Invoice Details at ████
During a reconnaissance phase, a directory named 'SSO' was discovered on the website ████████. Upon accessing this directory, it redirected to ██████████, where sensitive employee and customer data, including usernames, emails, purchase history, payment history, bills, phone numbers, customer...
Mars: CSRF to delete a pet on ██████
The /pets/delete endpoint on ████ was susceptible to Cross-Site Request Forgery CSRF attacks. This vulnerability enabled the deletion of a pet from the targeted user's account without authorization...
Mars: Test 4 █████
This is test team summary with limited disclosure...
Mars: 0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)
A vulnerability was present in the forgot password functionality of the platform. By sending carefully timed requests, an attacker was able to obtain the password reset token for any account using only the victim's email address...