583 matches found
CVE-2024-0726: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...
msg-global.com Cross Site Scripting vulnerability OBB-3829306
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
msg-plaut.com Cross Site Scripting vulnerability OBB-3828698
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-6629: Improper Neutralization of Input During Web Page Generation
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘msg’ parameter in all versions up to, and including, 2.8.6 due to insufficient input sanitization and output escaping. Th...
CVE-2023-6621: Improper Neutralization of Input During Web Page Generation
The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
PT-2024-15031 · WordPress · Post Smtp Mailer/Email Log
Name of the Vulnerable Software and Affected Versions: The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress versions up to, and including, 2.8.6 Description: The issue is related to Reflected Cross-Site Scripting via the msg...
CVE-2023-46015
Cross Site Scripting XSS vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL...
CVE-2023-46015
Cross Site Scripting XSS vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL...
CVE-2023-46015: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL...
Exploit for Cross-site Scripting in Code-Projects Blood_Bank
CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Si...
PT-2023-36002 · Git +1 · Kamailio
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as parse priv value and parse privacy, which are located in...
PT-2025-37539
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash can occur in the hv pci restore msi msg function during hibernation when a Linux virtual machine with an assigned PCI device runs on Hyper-V. This happens if the PCI device drive...
CVE-2023-2922
CVE-2023-2922 affects SourceCodester Comment System 1.0. The vulnerability is in the index.php file, within the GET Parameter Handler, where tampering the msg parameter triggers cross-site scripting. Exploitation is possible remotely and has been disclosed publicly. Several connected sources corr...
D-Link DIR-300 安全漏洞
The D-Link DIR-300 is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-300 REVA1.06 and earlier firmware versions, REVB2.06 and earlier firmware versions, which originates from an easy file inclusion attack via /model/langmsg.php...
PT-2023-8232
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability was found in the vhost new msg function in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating...
PT-2025-26098
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible memory leak in the mt76x02u mcu send msg routine has been resolved. The issue occurred when mt76u bulk msg failed, and the skb was not freed. Recommendations At the moment,...
msg-group.de Cross Site Scripting vulnerability OBB-3290773
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397EXPLOIT0DAY Exploit for the CVE-2023-23397 Cre...