138 matches found
CVE-2022-34456
Dell EMC Metro node, Versions prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application...
Dell EMC Metro node 代码注入漏洞
Dell EMC Metro node is a Dell Dell USA application that removes physical barriers within, across, and between data centers. Dell EMC Metro node code injection vulnerability can be exploited by remote attackers to submit special requests to execute arbitrary OS commands in the application context...
Microsoft Metro UI Cross-Site Scripting Vulnerability
Microsoft Metro UI v4.4.0 and later, and v4.5.0 and earlier, is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data, which could be exploited to inject web or html code...
GHSA-633R-R4P8-PW3W Cross site scripting in Metro UI
Metro UI v4.4.0 to v4.5.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function. User input is not properly sanitized before rendering in the textarea component...
Cross site scripting in Metro UI
Metro UI v4.4.0 to v4.5.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function. User input is not properly sanitized before rendering in the textarea component...
CVE-2022-41376
Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...
CVE-2022-41376
Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...
PT-2022-25827 · Metro Ui · Metro Ui
Name of the Vulnerable Software and Affected Versions: Metro UI versions 4.4.0 through 4.5.1 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This occurs via a Javascript function where user input is not properly sanitized before rendering in the textarea...
CVE-2022-41376
Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...
Metro UI 跨站脚本漏洞
Microsoft Metro UI v4.4.0 and later, and v4.5.0 and earlier, is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data, which could be exploited to inject web or html code...
CVE-2022-41376
The CVE-2022-41376 entry relates to a reflected cross-site scripting (XSS) vulnerability in Metro UI. Affected software includes Metro UI versions 4.4.0 through 4.5.0/4.5.1, where user-supplied input is not properly sanitized before rendering in the Javascript/textarea component, enabling injecti...
CVE-2022-41376
Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...
PT-2022-6359 · Dell Emc · Dell Emc Metro Node
Name of the Vulnerable Software and Affected Versions: Dell EMC Metro node versions prior to 7.1 Description: The issue is related to incorrect code generation management in the system, allowing a remote attacker to execute arbitrary commands. An authenticated nonprivileged attacker could...
Okta Hackers Behind Twilio and Cloudflare Attacks Hit Over 130 Organizations
The threat actor behind the attacks on Twilio and Cloudflare earlier this month has been linked to a broader phishing campaign aimed at 136 organizations that resulted in a cumulative compromise of 9,931 accounts. The activity has been condemned 0ktapus by Group-IB because the initial goal of the...
PT-2022-22981 · Inductive Automation · Inductive Automation Ignition
Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition version 8.1.15 b2022030114 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authenticati...
ambercreekmetro.org Cross Site Scripting vulnerability OBB-2505333
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
delhimetrorail.info Cross Site Scripting vulnerability OBB-2361879
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ransomware attack disrupts Metro Vancouver’s payment systems
By Deeba Ahmed The payments systems remained ineffective for three days after the ransomware attack, but payment data is safe, claims TransLink. This is a post from HackRead.com Read the original post: Ransomware attack disrupts Metro Vancouvers payment systems...
metro-motors.ca Improper Access Control vulnerability OBB-1367024
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)
Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...