NetExec

!Supported Python versionshttps://img.shields.io/badge/python...

Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-72138)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

CVE-2023-39712

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...

PT-2023-27084 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: Multiple cross-site scripting XSS vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2023-41316

CVE-2023-41316 affects Tolgee (open‑source localization platform) where lack of validation in the Org Name field allows HTML injection into unsanitized invitation emails sent by registered users. The vulnerability can enable directing recipients to malicious sites or executing JavaScript in the u...

CVE-2023-41316 HTML Injection with email in Tolgee

Tolgee is an open-source localization platform. Due to lack of validation field - Org Name, bad actor can send emails with HTML injected code to the victims. Registered users can inject HTML into unsanitized emails from the Tolgee instance to other users. This unsanitized HTML ends up in invitati...

security-research

Security Research This project hosts security advisories and...

CVE-2023-39711

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Subtotal and Paidbill parameters under the Add New Put section...

Low: file

Issue Overview: File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: "File" is the name of an Open Source project. CVE-2022-48554 Affected Packages: file Issue Correction: Run dnf update file --releasever 2023.1.20230906 or dnf update --advisory ALAS2023-2023-333...

CVE-2023-39711

Technical details about CVE-2023-39711 are not publicly available in the provided connected documents. Monitor for updates from sources in this dataset for affected products, impact, and fixes.

CVE-2023-41319 Remote Code Execution in Custom Integration Upload in Fides

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows custom integrations to be uploaded as a ZIP file. This ZIP file must contain YAML...

CVE-2023-39511

CVE-2023-39511 affects Cacti (1.2.x) with a Stored XSS in the reporting interface. An authenticated user can poison data stored in the Cacti database via malicious device names configured at /cacti/host.php and rendered on /cacti/reports_admin.php, enabling script execution in admins’ browsers wh...

WireMock Code Issue Vulnerability

WireMock is a popular open source tool for API simulation testing from WireMock Open Source. WireMock has a code issue vulnerability that stems from Filtering target addresses from proxy mode does not work for Webhooks...

CVE-2023-39366

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

Cross site scripting

Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data. The vulnerability is found in graphsnew.php. Several validations are performed, but the...

Sql injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

CVE-2023-39360

Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data. The vulnerability is found in graphsnew.php. Several validations are performed, but the...

Cross site scripting

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

CVE-2023-39364

CVE-2023-39364 (Cacti 1.2.24) describes an open redirect flaw where the auth_changepassword.php script accepts a URL parameter ref and reflects it in the password-change form, using it to redirect via header. This allows users with console access to be redirected to an arbitrary website after ini...