Elastic EpiServer Find Arbitrary Redirection Vulnerability

Elastic EpiServer Find is an open source application from Elastic. A search engine that enables developers to build great search experiences on websites , Intranet and almost any type of system with text content . An arbitrary redirection vulnerability in EpiServer Find versions prior to 13.2.7 c...

Progi1984 ps_emailsubscription 跨站脚本漏洞

Progi1984 psemailsubscription is Progi1984 an open source application. Provides an e-mail form. A security vulnerability exists in psemailsubscription that stems from the ability to inject javascript into the newsletter conditional field...

Unspecified vulnerability in oria gridx

sheila1227 gridx is sheila1227 an open source application . For fast rendering , good modular and plug-in based architecture of the Grid. oria gridx 1.3 security vulnerability , a remote attacker can be exploited to execute arbitrary code through the $query parameter carefully set the value...

qianjunakasumi kongchuanhujiao 授权问题漏洞

qianjunakasumi kongchuanhujiao is qianjunakasumi an open source application . An online teaching quiz statistics deep learning analytics system . A security vulnerability exists in github.com/kongchuanhujiao/server before version 1.3.21, which stems from an authentication bypass...

MarkAny MaEPSBroker Command Injection Vulnerability

MarkAny MaEPSBroker is a MarkAny open source application. Add a registry entry for the current user, which will allow the program to start automatically on every reboot. A command injection vulnerability exists in MaEPSBroker 2.5.0.31 and earlier versions, which stems from a command injection...

GitLab server-side request forgery vulnerability (CNVD-2021-26069)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A server-side request forgery vulnerability exists in GitLab, which can be exploited to conduct...

Unspecified vulnerability in vscode-swiftformat (CNVD-2021-29562)

vscode-swiftformat is an open source application. Automatically organize Swift code through SwiftFormat. A security vulnerability exists in vscode-swiftformat versions prior to 2.12.1, which can be exploited by attackers to execute arbitrary code...

Sauwming pjproject 安全漏洞

Sauwming pjproject is a Sauwming open source application. It combines the signaling protocol SIP with a rich multimedia framework and NAT traversal capabilities into a portable, high-level API for almost all types of systems, from desktops and embedded systems to cell phones. A security...

Nextcloud Access Control Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in versions prior to Nextcloud 20.0.6, which stems from a missing user check inadvertently populating another user's external...

Sourcecodester Web Based Quiz System 跨站脚本漏洞

Sourcecodester Web Based Quiz System is Sourcecodester an open source application . Used for a simple online based project . Sourcecodester Web Based Quiz System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by attackers to inject malicious JavaScript code...

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and email...

Scytl sVote 信任管理问题漏洞

Scytl sVote is a Spanish Scytl open source application. Provides voters to vote online. A security vulnerability exists in Scytl sVote 2.1, which can be exploited by an attacker to access OrientDB by providing admin as the administrator password...

CloudBees Jenkins Claim Plugin Cross-Site Scripting Vulnerability

Jenkins Claim is an open source application plugin for Jenkins. Provides users to declare failed builds and tests from Jenkins to show that they are responsible for fixing them . A cross-site script execution vulnerability exists in Jenkins Claim Plugin version 2.18.1 and earlier. The vulnerabili...

Emoncms Cross-Site Scripting Vulnerability (CNVD-2021-13224)

Emoncms is an open source web application for processing, recording and visualizing energy, temperature and other environmental data. A cross-site scripting vulnerability exists in Modules/input/Views/schedule.php in Emoncms 10.2.7 and earlier versions. An attacker can exploit this vulnerability...

Zulip server cross-site scripting vulnerability (CNVD-2021-10499)

Zulip server is an open source team chat application from the American company Zulip. A cross-site scripting vulnerability exists in Zulip server versions prior to 2.0.5. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit this...

DomainMod Cross-Site Request Forgery Vulnerability (CNVD-2019-32049)

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. DomainMod suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to add an administrator account...

Rukovoditel Project Management CRM 2.4.1 - 'lists_id' SQL Injection

Exploit Title: Rukovoditel Project Management CRM 2.4.1 - 'listsid' SQL Injection Dork: N/A Date: 27-01-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://sourceforge.net/projects/rukovoditel/ Version: 2.4.1 Category: Webapps Tested on: Wampp...

PHPfileNavigator v2.3.3 CSRF Add Arbitrary Users

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812a.txt Vendor: ================================ pfn.sourceforge.net Product: =================================== PHPfileNavigator v2.3.3 pfn Is...

Gitlab 'groups' API security restrictions bypass vulnerability-vulnerability warning-the black bar safety net

Affected system: GitLab GitLab 6. x Description: BUGTRAQ ID: 7 0 8 4 1 GitLab is a use of Ruby on Rails development, Open Source Application, to achieve a self-hosted Git project repository, through a Web interface to access the public or private projects. Gitlab 6.0 and later on the realization ...

Zenoss Monitoring System 4.2.5-2108 Cross Site Scripting

Exploit Title: Stored XSS vulnerability in Zenoss core open source monitoring system Date: 12/05/2014 Exploit author: Dolev Farhi dolevatopenflare.org Vendor homepage: http://zenoss.com Software Link: http://www.zenoss.com Version: Core 4.2.5-2108 64bit Tested on: Kali Linux Vendor alerted:...