Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:45 a.m.5 views

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

9.6CVSS6AI score0.01485EPSS
Exploits2References1
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:0 a.m.3 views

The vulnerability of the RenderTune rendering tool, related to the lack of measures taken to protect website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the RenderTune rendering tool is related to the lack of measures taken to protect the structure of web pages when processing the Upload Title parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

7.5CVSS5.3AI score0.01485EPSS
Exploits2References3Affected Software1
OSV
OSV
added 2024/02/29 7:15 a.m.1 views

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

9.6CVSS6AI score0.01485EPSS
Exploits2References1
NVD
NVD
added 2024/02/29 7:15 a.m.7 views

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

9.6CVSS5.8AI score0.01485EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/02/29 12:0 a.m.12 views

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

6.1AI score0.01485EPSS
Exploits2References1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.4 views

RenderTune Security Vulnerability

RenderTune is a free electronic application for Mac/Windows/Linux that uses ffmpeg to combine audio + image files into video files. A security vulnerability exists in RenderTune v1.1.4, which stems from a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to execut...

9.6CVSS5.9AI score0.01485EPSS
Exploits2References2
Cvelist
Cvelist
added 2024/02/29 12:0 a.m.19 views

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

6AI score0.01485EPSS
Exploits2References1
CVE
CVE
added 2024/02/29 12:0 a.m.87 views

CVE-2024-25292

CVE-2024-25292 : RenderTune v1.1.4 is affected by a cross-site scripting (XSS) vulnerability that allows an attacker to inject arbitrary scripts via the Upload Title parameter. Public details include a PoC/exploit repo illustrating the XSS path and potential RCE implications in related examples. ...

9.6CVSS6AI score0.01485EPSS
Exploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/28 12:0 a.m.3 views

PT-2024-8848 · Unknown · Rendertune

Name of the Vulnerable Software and Affected Versions: RenderTune version 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs due to inadequate protection of the web page structure when handling the Upload Title parameter. This allows a remote attacker t...

9.6CVSS6AI score0.01485EPSS
Exploits2References11
Rows per page
Query Builder