EUVD-2021-14126

Malware in sbrugna...

EUVD-2021-14128

Malware in sbrugna...

EUVD-2021-14129

Malware in sbrugna...

Monica 2.19.1 - (last_name) Stored XSS Vulnerability

Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host: 192.168.99.162...

Monica 2.19.1 - 'last_name' Stored XSS

Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...

Monica 2.19.1 Cross Site Scripting

Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...

CVE-2021-27370

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...

CVE-2021-27371

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

CVE-2021-27370

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27369

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

CVE-2021-27368

The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...

CVE-2021-27368

The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...

Cross site scripting

The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...

Cross site scripting

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...

Cross site scripting

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

Design/Logic Flaw

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

CVE-2021-27370

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...

CVE-2021-27370

CVE-2021-27370 describes a stored XSS vulnerability in Monica 2.19.1, exploitable via the Last Name field on the Contacts page. The CVE is supported by multiple sources (NVD/NVD metrics show CVSSv3.1 base score 5.4 MEDIUM and CVSSv2 base score 3.5 LOW), with public details including exploit examp...

CVE-2021-27371

CVE-2021-27371 affects Monica 2.19.1: a stored XSS vulnerability on the Contact page via the Description field. The available sources confirm the vulnerability exists in Monica 2.19.1 and is triggered through input in the Description field; the root cause is not explicitly described in the provid...