Lucene search
K

6 matches found

OSV
OSV
added 2022/09/23 4:32 p.m.211 views

GHSA-W9MF-83W3-FV49 Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles

A Stored XSS vulnerability was reported in the Keycloak Security mailing list, affecting all the versions of Keycloak, including the latest release 18.0.1. The vulnerability allows a privileged attacker to execute malicious scripts in the admin console, abusing of the default roles functionality...

5.4CVSS5.1AI score0.00882EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/09/23 4:32 p.m.460 views

Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles

A Stored XSS vulnerability was reported in the Keycloak Security mailing list, affecting all the versions of Keycloak, including the latest release 18.0.1. The vulnerability allows a privileged attacker to execute malicious scripts in the admin console, abusing of the default roles functionality...

3.8CVSS1.7AI score0.00882EPSS
Exploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2018/04/25 6:21 p.m.105 views

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

9.8CVSS7.2AI score0.02038EPSS
Exploits0References6
0day.today
0day.today
added 2018/03/07 12:0 a.m.76 views

Rapid Scada 5.5.0 Insecure Permissions Vulnerability

Exploit for windows platform in category local exploits Rapid Scada - 5.5.0 - Insecure Permissions ------------------------------------------------------- Author: - Filipe Xavier Oliveira: icacls SCADA SCADA BUILTIN\Administrators:IF BUILTIN\Administrators:IOICIIOF NT AUTHORITY\SYSTEM:IF NT...

7.2CVSS7.4AI score0.0004EPSS
Exploits3
Packet Storm
Packet Storm
added 2011/11/24 12:0 a.m.19 views

LibLime Koha 4.2 Local File Inclusion

Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team www.vigasis.com 0-Day Exploit Akin Tosunlar Special Thanks to Ozg...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2010/06/25 12:0 a.m.25 views

Apache Axis 1.5 Session Fixation

===== Tempest Security Intelligence - Advisory 02 / 2010 =========== Vulnerability = 'Apache Axis Session Fixation Vulnerability' Authors = 'Tiago Ferreira ' 'Leandro Oliveira ' ======== Table of Contents =========================================== 1. Overview 2. Detailed description 3. Other...

7.4AI score
Exploits0
Rows per page
Query Builder