1978 matches found
Important: rsync
Issue Overview: A flaw was found in rsync that is triggered by a victim rsync user/client connecting to a malicious rsync server. The server can copy and overwrite arbitrary files in the client's rsync target directory and subdirectories. This flaw allows a malicious server, or in some cases,...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote...
CVE-2022-40606
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...
Design/Logic Flaw
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
Cross site scripting
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
Design/Logic Flaw
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
PT-2022-25670 · Mitre · Mitre Caldera
Name of the Vulnerable Software and Affected Versions: MITRE CALDERA version 4.1.0 Description: The issue allows stored XSS via the app.contact.gist field, also known as the gist contact configuration field, leading to the execution of arbitrary commands on agents. Recommendations: For MITRE...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CVE-2022-40605
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
CVE-2022-40606
CVE-2022-40606 affects MITRE CALDERA prior to 4.1.0. The vulnerability is an XSS in the Operations tab and/or Debrief plugin triggered by a crafted operation name. The connected documents corroborate the same description and reference Caldera 4.1.0 release, but do not provide explicit remediation...
CVE-2022-40606
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist aka the gist contact configuration field, leading to execution of arbitrary commands on agents...
CVE-2022-41139
CVE-2022-41139 affects MITRE CALDERA (version 4.1.0). The vulnerability is a stored XSS via the app.contact.gist field (gist contact configuration), which can lead to execution of arbitrary commands on agents. Public references consistently describe this as a stored XSS issue in CALDERA 4.1.0. Th...
CVE-2022-40605
CVE-2022-40605 (MITRE CALDERA) affects MITRE CALDERA before 4.1.0, with an XSS exposure in the Operations tab and/or Debrief plugin triggered by a crafted operation name. The description indicates a separate vulnerability from CVE-2022-40606. The connected sources reiterate the same issue and not...