Lucene search
+L

8 matches found

OSV
OSV
•added 2024/04/23 10:15 p.m.•12 views

CVE-2024-30886

A stored cross-site scripting XSS vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter...

5.4CVSS5.9AI score0.00325EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/23 10:15 p.m.•18 views

CVE-2024-30886

A stored cross-site scripting XSS vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter...

5.4CVSS5.4AI score0.00325EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/23 12:00 a.m.•21 views

CVE-2024-30886

A stored cross-site scripting XSS vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter...

5.6AI score0.00325EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/23 12:00 a.m.•87 views

CVE-2024-30886

The HadSky v7.6.3 forum system is vulnerable to a stored cross-site scripting (XSS) vulnerability in its remotelink function . Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the url parameter . To mitigate this risk, it is recommended to disable the remote...

5.4CVSS5.6AI score0.00325EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•16 views

PT-2024-23658 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky version 7.6.3 Description: A stored cross-site scripting XSS issue in the remotelink function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter. Recommendations: For HadSky...

5.4CVSS5.5AI score0.00325EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•1 views

CVE-2024-30886: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter...

5.4CVSS6.1AI score0.00325EPSS
SaveExploits1References2
ThreatPost
ThreatPost
•added 2015/08/14 9:54 a.m.•11 views

OwnStar Attack Now Aimed at BMW, Chrysler, Mercedes Cars

The OwnStar attack that hacker Samy Kamkar revealed late last month can be used against not only GM vehicles, but cars manufactured by Mercedes-Benz, BMW, and Chrysler, as well. The attack allows Kamkar to intercept the traffic from nearby mobile phones that have specific apps open that control...

1.9AI score
SaveExploits0References5
ThreatPost
ThreatPost
•added 2015/07/30 9:38 a.m.•13 views

OwnStar Device Can Remotely Locate, Unlock, and Start GM Cars

Car hacking just jumped up a few levels. A security researcher has built a small device that can intercept the traffic from the OnStar RemoteLink mobile app and give him persistent access to a user’s vehicle to locate, unlock, and start it. The device is called OwnStar and it’s the creation of Sa...

2.7AI score
SaveExploits0References4
Rows per page
Query Builder