365 matches found
SUSE CVE-2011-3635
Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname...
SUSE CVE-2011-4897
Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...
SUSE CVE-2011-4939
The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...
Denial Of Service (DoS)
github.com/usememos/memos is vulnerable to denial of service attacks. A malicious user is able to pass a huge number of characters through the Nickname parameter, causing the application to crash through the POST request...
Denial of Service
Description There is no limit of "Nickname" content length while updating your information that lead to Denial of Service by entering huge number of characters if you insert the following POST request "email": "[email protected]", "id": 104, "nickname":...
CVE-2022-36778
insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...
CVE-2022-36778 Synel - eHarmony Stored XSS
insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...
PT-2022-23618 · Synel · Eharmony
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an attacker to insert HTML or JavaScript code into a specific input field. To access the vulnerable input, an attacker would navigate t...
CVE-2022-36778
insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...
Input validation
insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...
CVE-2022-34768
CVE-2022-34768 allows injection of HTML/JavaScript into the “Workers > worker nickname” input. Affected component: the input field used for worker nicknames; root cause is input handling that permits code insertion. Impact as per NVD: base CVSS v3.1 = 7.5 (HIGH), with I = HIGH, C/N? per vector...
CVE-2022-34768 Synel - eHarmony Stored XSS
insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...
CVE-2022-34768
insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...
Reolink RLC-410W device TestEmail out-of-bounds write vulnerability
Summary An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted network request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Reolink...
CVE-2021-46034
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
Cross site scripting
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
CVE-2021-46034
ForestBlog is affected by a cross-site scripting (XSS) vulnerability exploitable via the nickname input box. The issue stems from insufficient validation of client-side data, allowing injected JavaScript to execute in the victim’s browser. Public references describe the vulnerability across multi...
CVE-2021-37058
There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...
CVE-2021-37058
There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...
CVE-2021-37058
There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...