Lucene search
+L

695 matches found

OSV
OSV
added 2024/09/19 5:15 p.m.10 views

CVE-2024-8651

A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor...

5.3CVSS5.8AI score0.00427EPSS
Exploits0References1
NVD
NVD
added 2024/09/19 5:15 p.m.49 views

CVE-2024-8653

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and ...

6.1CVSS0.00267EPSS
Exploits0References1
NVD
NVD
added 2024/09/19 5:15 p.m.20 views

CVE-2024-8652

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and o...

6.1CVSS0.00267EPSS
Exploits0References1
OSV
OSV
added 2024/09/19 5:15 p.m.10 views

CVE-2024-8652

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and o...

6.1CVSS5.9AI score0.00267EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/19 4:39 p.m.22 views

CVE-2024-8653 Netcat CMS: multiple reflected cross-site scripting vulnerabilities in netshop module

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and ...

5.9CVSS7.5AI score0.00267EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/19 4:39 p.m.31 views

CVE-2024-8653 Netcat CMS: multiple reflected cross-site scripting vulnerabilities in netshop module

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and ...

5.9CVSS0.00267EPSS
Exploits0References1
CVE
CVE
added 2024/09/19 4:39 p.m.49 views

CVE-2024-8653

CVE-2024-8653 affects NetCat CMS with multiple reflected cross-site scripting vulnerabilities in the netshop module. Affected versions include 6.4.0.24126.2 (and potentially others); a patch is available in versions 6.4.0.24248 and later. The vulnerability allows an attacker to execute JavaScript...

6.1CVSS6.5AI score0.00267EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/19 4:35 p.m.23 views

CVE-2024-8652 Netcat CMS: reflected cross-site scripting in openstat module

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and o...

5.9CVSS7.5AI score0.00267EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/19 4:35 p.m.24 views

CVE-2024-8652 Netcat CMS: reflected cross-site scripting in openstat module

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and o...

5.9CVSS0.00267EPSS
Exploits0References1
CVE
CVE
added 2024/09/19 4:35 p.m.50 views

CVE-2024-8652

CVE-2024-8652 : NetCat CMS is affected by a reflected cross-site scripting vulnerability in the openstat module. Affected versions are 6.4.0.24126.2 through 6.4.0.24247. The issue allows an attacker to execute JavaScript in a user’s browser when they visit a specifically crafted path. Exploitatio...

6.1CVSS6.5AI score0.00267EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/19 4:30 p.m.33 views

CVE-2024-8651 Netcat CMS: user enumeration

A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor...

6.9CVSS0.00427EPSS
Exploits0References1
CVE
CVE
added 2024/09/19 4:30 p.m.50 views

CVE-2024-8651

CVE-2024-8651 — NetCat CMS: user enumeration involves a vulnerability where an attacker can send a specially crafted HTTP request to check whether a user exists in the system. Affected are NetCat CMS versions around 6.4.0.24126.2 up to 6.4.0.24247, with a patch available starting from 6.4.0.24248...

6.9CVSS5.3AI score0.00427EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/19 4:30 p.m.30 views

CVE-2024-8651 Netcat CMS: user enumeration

A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor...

6.9CVSS7.1AI score0.00427EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/19 12:0 a.m.5 views

NetCat CMS 安全漏洞

NetCat CMS is a content management system from NetCat, Inc. A security vulnerability previously existed in NetCat CMS version 6.4.0.24248. An attacker could exploit the vulnerability to execute JavaScript code in a user's browser when the user visits a specific path on the site...

6.1CVSS7AI score0.00267EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/19 12:0 a.m.7 views

NetCat CMS 安全漏洞

NetCat CMS is a content management system from NetCat, Inc. A security vulnerability previously existed in NetCat CMS version 6.4.0.24248. An attacker could exploit the vulnerability to execute JavaScript code in a user's browser when the user visits a specific path on the site...

6.1CVSS7AI score0.00267EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/19 12:0 a.m.6 views

NetCat CMS 安全漏洞

NetCat CMS is a content management system from NetCat, Inc. A security vulnerability exists in NetCat CMS prior to version 6.4.0.24248. An attacker exploiting this vulnerability could send a specially crafted http request to check for the presence of a user on the system...

6.9CVSS6.6AI score0.00427EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/19 12:0 a.m.19 views

PT-2024-39150 · Unknown · Netcat Cms

Name of the Vulnerable Software and Affected Versions: NetCat CMS versions 6.4.0.24126.2 through 6.4.0.24247 Description: A vulnerability in NetCat CMS allows an attacker to send a specially crafted HTTP request to check whether a user exists in the system. This issue could be a basis for further...

6.9CVSS6.6AI score0.00427EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/09/19 12:0 a.m.13 views

PT-2024-39152 · Unknown · Netcat Cms

Name of the Vulnerable Software and Affected Versions: NetCat CMS versions 6.4.0.24126.2 through 6.4.0.24247 Description: A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue enables cross-site...

6.1CVSS6.4AI score0.00267EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/09/19 12:0 a.m.8 views

PT-2024-39151 · Unknown · Netcat Cms

Name of the Vulnerable Software and Affected Versions: NetCat CMS versions 6.4.0.24126.2 through 6.4.0.24247 Description: A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit a specific path on the site. Recommendations: For versions...

6.1CVSS7.1AI score0.00267EPSS
Exploits0References7
GithubExploit
GithubExploit
added 2024/09/14 6:27 a.m.616 views

Exploit for CVE-2024-8504

⚡️ Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE ⚡️...

9.8CVSS10AI score0.80023EPSS
Exploits12
Rows per page
Query Builder