184 matches found
CVE-2026-1147: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affects an unknown part of the file /php/apipatientschedule.php. Performing a manipulation of the argument Reason results in cross site scripting. It is possible to initiate the attac...
CVE-2026-1146: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The...
CVE-2026-1148: Cross-Site Request Forgery (CSRF)
A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This vulnerability affects unknown code. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely...
PT-2026-3430
A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affects an unknown part of the file /php/api patient schedule.php. Performing a manipulation of the argument Reason results in cross site scripting. It is possible to initiate the...
EUVD-2022-47670
Malicious code in bioql PyPI...
EUVD-2024-45584
Malicious code in bioql PyPI...
A Bootiful Podcast: DevOps and AI luminary Patrick Debois
Hi, Spring, cloud native, and AI fans! In this installment, I had the opportunity to briefly sit down and talk with DevOps and AI luminary Patrick Debois, from the amazing Devoxx UK 2025 show...
CVE-2024-51649
Cross-Site Request Forgery CSRF vulnerability in Patrick Lumumba Mobilize mobilize allows Stored XSS.This issue affects Mobilize: from n/a through = 3.0.7...
Malicious code in patrick-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-858 Malicious code in patrick-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Drupal Browser Back Button module 1.0.0-2.0.1 - Authenticated Cross Site Scripting (XSS) vulnerability
Authenticated Cross Site Scripting XSS vulnerability discovered by Patrick Fey in WordPress Module Browser Back Button versions 1.0.0-2.0.1...
CVE-2024-51649
Cross-Site Request Forgery CSRF vulnerability in Patrick Lumumba Mobilize mobilize allows Stored XSS.This issue affects Mobilize: from n/a through = 3.0.7...
CVE-2024-51649
The CVE CVE-2024-51649 affects the WordPress Mobilize plugin and describes a Cross-Site Request Forgery (CSRF) flaw that enables Stored XSS. Affected version range is Mobilize up to 3.0.7 (and earlier). The connected sources consistently state CSRF leading to stored XSS, but none of the documents...
CVE-2024-51649: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Patrick Lumumba Mobilize mobilize allows Stored XSS.This issue affects Mobilize: from n/a through = 3.0.7...
Moxa UDP Device Discovery
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Moxa UDP Device Discovery', 'Description' = %q The Moxa protocol listens on 4800/UDP and will respond to broadcast or direct traffic. The service...
CVE-2024-43216
The CVE CVE-2024-43216 targets Filr – Secure document library (WordPress plugin). It reports improper input neutralization leading to stored XSS in web page generation, affecting Filr library versions from n/a up to 1.2.4. The issue is categorized as Stored XSS with impact limited to confidential...
CVE-2024-43216 WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Filr filr-protection.This issue affects Filr: from n/a through = 1.2.4...
CVE-2024-43216 WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Filr filr-protection.This issue affects Filr: from n/a through = 1.2.4...
WordPress Filr – Secure document library Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Software Filr – Secure document library Type Plugin Vulnerable versions = 1.2.4 Fixed in 1.2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43216 Patch priority Low CVSS severity Low 6.5 Developer Patrick Posner PSID d8538e254980 Credits domiee13 Required...