76 matches found
Moss 安全漏洞
Moss is a simple and lightweight content management system open-sourced by deep-project. A security vulnerability exists in Moss v0.1.3, which stems from the presence of an SQL injection that allows an attacker to inject a crafted payload into the order parameter...
PT-2025-3401 · Moss · Moss
Name of the Vulnerable Software and Affected Versions: Moss version v0.1.3 Description: The issue is related to an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter. This vulnerability can be exploited by injecting malicious input int...
CVE-2024-57098
Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter...
CVE-2024-57098
Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter...
CVE-2024-32428
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...
CVE-2024-32428
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...
CVE-2024-32428 WordPress MWW Disclaimer Buttons plugin <= 3.0.2 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...
CVE-2024-32428 WordPress MWW Disclaimer Buttons plugin <= 3.0.2 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...
moss-design.com Open Redirect vulnerability OBB-3790257
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-32317
Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...
Code injection
Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...
CVE-2023-32317 Autolab tar slip in cheat checker functionality (`GHSL-2023-082`)
Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...
CVE-2023-32317 Autolab tar slip in cheat checker functionality (`GHSL-2023-082`)
Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...
CVE-2023-32317
Autolab’s CVE-2023-32317 describes a tar-slip vulnerability in the MOSS cheat checker. An authenticated instructor can upload a crafted tar file via either the Base File Tar or Additional file archive inputs, causing expansion of archive contents to attacker-controlled paths (e.g., ../../../../tm...
Autolab 路径遍历漏洞
Autolab is a course management service. It supports automatically graded programming assignments. A security vulnerability exists in Autolab 2.10.0 and earlier versions, which stems from a Tar slip vulnerability found in Autolab's MOSS feature that can be exploited by an attacker to upload...
PT-2023-23725 · Autolab · Autolab
Name of the Vulnerable Software and Affected Versions: Autolab versions prior to 2.11.0 Description: A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab, which is a course management service for auto-graded programming assignments. To exploit this issue, an...
CVE-2023-23794
CVE-2023-23794 refers to a Stored XSS in the WordPress plugin Semalt Blocker by Alex Moss, affected in versions
CVE-2023-23794 WordPress Semalt Blocker Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alex Moss Semalt Blocker plugin = 1.1.3 versions...
PT-2023-19209 · Unknown · Alex Moss Semalt Blocker
Name of the Vulnerable Software and Affected Versions: Alex Moss Semalt Blocker plugin versions prior to 1.1.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For Alex Moss Semalt...