27 matches found
EUVD-2020-10617
Malware in sbrugna...
EUVD-2022-24505
Malicious code in bioql PyPI...
CVE-2022-1163
Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...
CVE-2020-18693
Cross Site Scripting XSS in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'...
minewebcms 1.15.2 - Cross-site Scripting Vulnerability
Exploit Title: minewebcms 1.15.2 - Cross-site Scripting XSS Google Dork: NA Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://mineweb.org/ Software Link: https://github.com/mineweb/minewebcms Version: 1.15.2 Tested on: KALI OS CVE : CVE-2022-1163 --------------- Steps to...
minewebcms 1.15.2 Cross Site Scripting
Exploit Title: minewebcms 1.15.2 - Cross-site Scripting XSS Google Dork: NA Date: 02/20/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://mineweb.org/ Software Link: https://github.com/mineweb/minewebcms Version: 1.15.2 Tested on: KALI OS CVE : CVE-2022-1163...
minewebcms 1.15.2 - Cross-site Scripting (XSS)
Exploit Title: minewebcms 1.15.2 - Cross-site Scripting XSS Google Dork: NA Date: 02/20/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://mineweb.org/ Software Link: https://github.com/mineweb/minewebcms Version: 1.15.2 Tested on: KALI OS CVE : CVE-2022-1163...
CVE-2022-1163
Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...
CVE-2022-1163
Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...
CVE-2022-1163 Cross-site Scripting (XSS) - Stored in mineweb/minewebcms
Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...
CVE-2022-1163
Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...
CVE-2022-1163
MineWebCMS (GitHub repo mineweb/minewebcms) 1.15.2 contains a stored Cross-site Scripting (XSS) vulnerability. The issue is triggered by input fields in the admin interface (e.g., Link Name and URL) that accept data from untrusted sources and later render it in pages, enabling script execution in...
MineWebCMS 跨站脚本漏洞
MineWebCMS is a software application. A CMS i.e. Content Management System, in addition to being a fully customizable and intuitive site that will fit perfectly on your Minecraft server. MineWebCMS suffers from a cross-site scripting vulnerability, there is no information about this vulnerability...
CVE-2022-1163: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...
PT-2022-13680
Name of the Vulnerable Software and Affected Versions mineweb/minewebcms versions prior to next Description The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the website, which will be executed by other users' browsers. The...
Cross-site Scripting (XSS) - Stored
Description Stored cross-site scripting also known as second-order or persistent XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. Proof of Concept Steps to Reproduce:- = Install the WebApp and Setup it =...
Cross-site Scripting (XSS) - Stored in mineweb/minewebcms
Description A malicious actor is able to add new Notification with a malicious payload, and upon the user receives the notification, the malicious payload is being executed. Proof of Concept - 1; Log in with any user, who is able to submit notifications - 2; Create a new notification at...
Cross-site Scripting (XSS) - Stored in mineweb/minewebcms
Description A malicious actor is able to add a malicious payload as a new Page Title, and after every time any administrative user visits the /admin/pages route, the XSS payload is executed. Proof of Concept 1;Create a new Page at the following route: /admin/pages/add. Use the following payload a...
