CVE-2021-41565 Tad TadTools - Reflected XSS

TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks...

CVE-2021-41565

CVE-2021-41565 affects Tad Tools TadTools. The issue is a cross-site scripting vulnerability caused by insufficient validation of input on a special page parameter, enabling remote attackers to inject JavaScript without logging in and potentially perform reflective XSS. Primary impact is client-s...

PT-2021-23338

Name of the Vulnerable Software and Affected Versions TadTools affected versions not specified Description The issue concerns a special page parameter in TadTools that fails to properly restrict input of specific characters. This allows remote attackers to inject JavaScript syntax without logging...

CVE-2021-36150 - Insert from files link text - Reflective (self) Cross Site Scripting

More info at https://www.silverstripe.org/download/security-releases/CVE-2021-36150...

Cross site scripting

Shopkit v2.7 contains a reflective cross-site scripting XSS vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field...

CVE-2020-20508

Shopkit v2.7 contains a reflective XSS in the /account/register flow. The vulnerability stems from unsanitized input in the E‑Mail text field, allowing an attacker to craft payloads that hijack user credentials. Affected component: Shopkit account registration. Root cause: inadequate input saniti...

CVE-2020-20508: Improper Neutralization of Input During Web Page Generation

Shopkit v2.7 contains a reflective cross-site scripting XSS vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field...

Trial Ends in Guilty Verdict for DDoS-for-Hire Boss

A jury in California today reached a guilty verdict in the trial of Matthew Gatrel, a St. Charles, Ill. man charged in 2018 with operating two online services that allowed paying customers to launch powerful distributed denial-of-service DDoS attacks against Internet users and websites. Gatrels...

NetIQ Access Manager Cross-Site Scripting Vulnerability

NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are using a cell phone or laptop to access on-premise or cloud-based services, Access Manager is secure and provides a single sign-on experience.NetIQ Access Manager versio...

JEESNS Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74052)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the system error message text field...

CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

Cross site scripting

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

Cross site scripting

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module. Connected documents confirm the issue across multiple databases, but do not provide concrete exploit details, affected versions beyond the stated 1.0, or a...

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

PT-2021-10480

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a reflective cross-site scripting XSS vulnerability. This vulnerability is located in the keyword search function under the background articles module. Recommendations: For WTCMS version...

CVE-2020-20345: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

CVE-2020-20344: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps

Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service DDoS attack recorded to date. The attack, launched via a Mirai botnet, is said to have targeted an unnamed customer in the financial industr...