Lucene search
+L

240 matches found

OSV
OSV
added 2021/11/04 8:15 p.m.18 views

CVE-2021-41249

GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than [email protected] are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...

4.7CVSS5AI score
SaveExploits0References3
NVD
NVD
added 2021/11/04 8:15 p.m.52 views

CVE-2021-41249

GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than [email protected] are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...

7.1CVSS0.01182EPSS
SaveExploits0References3
Prion
Prion
added 2021/11/04 8:15 p.m.26 views

Code injection

GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than email protected are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names, exposing a dynamic XS...

2.6CVSS4.9AI score0.01182EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/04 8:15 p.m.7 views

CVE-2021-41249

GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than [email protected] are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...

7.1CVSS6.6AI score0.01182EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/11/04 8:05 p.m.103 views

CVE-2021-41249

All sources describe a GraphQL Playground XSS in graphql-playground-react older than v1.7.28. The vulnerability arises from compromised HTTP introspection responses or schema prop values containing malicious GraphQL type names, enabling dynamic XSS and potential code execution when a user loads a...

7.1CVSS5.2AI score0.01182EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/11/04 8:05 p.m.59 views

CVE-2021-41249 XSS vulnerability in GraphQL Playground

GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than [email protected] are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...

7.1CVSS7AI score0.01182EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/04 12:00 a.m.9 views

GraphQL Playground 跨站脚本漏洞

GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. A cross-site scripting vulnerability exists in GraphQL Playground versions prior to 1.4.7, which stems from the software's lack of effective...

7.1CVSS5.9AI score0.01032EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/11/04 12:00 a.m.21 views

PT-2021-23212 · Unknown +1 · Graphql-Playground-React +2

Name of the Vulnerable Software and Affected Versions: graphiql versions prior to 1.4.7 graphql-playground-react versions prior to 1.7.28 Description: The vulnerability allows for compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names, exposing a...

7.1CVSS6.5AI score0.01182EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2021/11/04 12:00 a.m.20 views

GraphQL Playground 跨站脚本漏洞

GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. GraphQL Playground suffers from a cross-site scripting vulnerability that stems from the program's susceptibility to corrupt HTTP schema...

7.1CVSS5.9AI score0.01182EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2021/10/12 8:30 p.m.39 views

Shisho - Lightweight Static Analyzer For Several Programming Languages

Shisho is a lightweight static analyzer for developers. Please seethe usage documentation for further information. Try at Playground You can try Shisho at our playground. Try with Docker You can try shisho in your machine as follows: echo "func testv string int return lenv + 1; " | docker run -i...

7.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2021/10/07 12:30 p.m.309 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 f...

7.5CVSS9.4AI score0.99992EPSS
SaveExploits163
CNNVD
CNNVD
added 2021/09/21 12:00 a.m.5 views

Butter 输入验证错误漏洞

Butter is a small playground program. Butter has an input validation error vulnerability that stems from a kernel error...

8.8CVSS6.5AI score0.00763EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2021/09/06 3:07 p.m.13 views

ohioslargestplayground.com Cross Site Scripting vulnerability OBB-2134631

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
OSV
OSV
added 2020/11/23 9:15 p.m.9 views

CVE-2020-24227

Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits1References1
NVD
NVD
added 2020/11/23 9:15 p.m.30 views

CVE-2020-24227

Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password...

7.5CVSS7.4AI score0.01401EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/23 9:15 p.m.22 views

Design/Logic Flaw

Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password...

5CVSS7.3AI score0.01401EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/11/23 8:56 p.m.58 views

CVE-2020-24227

Playground Sessions v2.5.582 and earlier for Windows stores user credentials in plain text, enabling anyone with access to UserProfiles.sol to extract email and password. Affected component/file: UserProfiles.sol within the Windows build. Root cause: credentials stored in cleartext rather than us...

7.5CVSS7.3AI score0.01401EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/11/23 8:56 p.m.43 views

CVE-2020-24227

Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password...

7.4AI score0.01401EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2020/11/23 12:00 a.m.13 views

Playground Sessions Information Disclosure Vulnerability

GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. A security vulnerability exists in Playground Sessions version v2.5.582 and prior versions, which stems from storing user credentials in plaintext...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits1References2
HackRead
HackRead
added 2020/11/12 4:18 p.m.29 views

Animal Jam data breach – Hacker leaks database with millions of accounts

By Waqas The developer of famous online playground Animal Jam has suffered a data breach that exposed tens of millions of users' data. This is a post from HackRead.com Read the original post: Animal Jam data breach - Hacker leaks database with millions of accounts...

2.9AI score
SaveExploits0
Rows per page
Query Builder