Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section...

PurpleOps - An Open-Source Self-Hosted Purple Team Management Web Application

An open-source self-hosted purple team management web application. Key Features Template engagements and testcases Framework friendly Role-based Access Control & MFA Inbuilt DOCX reporting + custom template support How PurpleOps is different: No attribution needed Hackable, no "no-reversing"...

[SECURITY] Fedora 38 Update: firefox-117.0-1.fc38

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Bludit Cross-Site Scripting Vulnerability

Bludit is an open source lightweight blog content management system CMS. A cross-site scripting vulnerability exists in BluditCMS version v.3.14.1. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2023-39710

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section...

CVE-2023-39714

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab suffers from a security vulnerability that stems from improper privileg...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from the ability to re...

PT-2023-27085 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the "Add New...

memos Security Vulnerabilities

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos versions prior to 0.13.2, which stems from incorrect privilege management...

PT-2023-27082 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name, Address, and Company parameters under the "Add Custome...

CVE-2023-39710

CVE-2023-39710 documents multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0. The issue allows attackers to inject arbitrary web scripts or HTML by crafting payloads into the Name, Address, and Company fields in the Add Customer section, le...

DataEase SQL Injection Vulnerability

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A security vulnerability exists in DataEase version v.1.18.9, which stems from the presence of a SQL...

CVE-2023-39714

In Free and Open Source Inventory Management System v1.0, there are multiple XSS vulnerabilities that allow attackers to execute arbitrary web scripts/HTML by injecting payloads into the Name, Address, and Company fields in the Add New Member form. The documents confirm client-side script executi...

ric-plt-lib-rmr security vulnerability

ric-plt-lib-rmr is an open source message router library from O-RAN Software Community. Applications can use it to send messages to other RMR-based applications. A security vulnerability exists in ric-plt-lib-rmr version v4.9.0, which originates from not verifying the source of a received routing...

CVE-2023-39710

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could allow an attacke...

Free and Open Source Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could allow an attacke...

ric-plt-e2 security vulnerability

ric-plt-lib-rmr is an open source message router library from O-RAN Software Community. Applications can use it to send messages to other RMR-based applications. A security vulnerability exists in ric-plt-e2 that originated from allowing an attacker to cause a denial of service DoS by incorrectly...

New open-source infostealer, and reflections on 2023 so far

Welcome to this weeks edition of the Threat Source newsletter. Im covering for Jon this week whilst he takes some well-deserved holiday. Whats on my mind this week? Well, apart from a new horror film that I just read about called "Slotherhouse" where the killer is, um, a sloth I predict nothing b...