1083 matches found
The LybraRETHVault.depositEtherToMint doesn't keep record of user's ether deposits which results in loss for the user.
Lines of code Vulnerability details Impact High: User will lose his deposited ether. Proof of Concept The collateralAsset address variable which is used in LybraPeUSDVaultBase is assumed to be stETH token address Now the depositEtherToMint function from contract LybraRETHVault.sol which inherits...
CVE-2023-3477
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be...
CVE-2023-3477
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be...
Cross site scripting
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be...
CVE-2023-3477 RocketSoft Rocket LMS Contact Form store cross site scripting
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be...
CVE-2023-3477
The CVE-2023-3477 issue affects RocketSoft Rocket LMS 1.7, specifically the Contact Form component at /contact/store. The root cause described across connected docs is that the name/subject/message parameters can be manipulated to trigger cross-site scripting, with remote initiation. Several sour...
RocketSoft Rocket LMS 跨站脚本漏洞
RocketSoft Rocket LMS is a full-featured Learning Management System from RocketSoft. A cross-site scripting vulnerability exists in RocketSoft Rocket LMS version 1.7, which stems from the name/subject/message parameter in the file /contact/store that causes cross-site scripting...
PT-2023-25006 · Rocketsoft · Rocket Lms
Name of the Vulnerable Software and Affected Versions: RocketSoft Rocket LMS version 1.7 Description: A vulnerability was found in the Contact Form component, specifically affecting the /contact/store file. The manipulation of the name, subject, or message arguments leads to cross-site scripting...
CVE-2023-3477: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be...
rocket-strategy.com Cross Site Scripting vulnerability OBB-3474009
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Rocket LMS 1.7 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Exploit for Special Element Injection in Rocket.Chat
CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remot...
Rocket.Chat 信息泄露漏洞
Rocket.Chat is an open source team chat software. An information disclosure vulnerability exists in versions prior to Rocket.Chat 6.0, which stems from an ACL check in the slash command /mute, after checking if a user is a member of a given channel, which can disclose private channel members to...
PT-2023-21650 · Unknown · Rocket.Chat
Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 6.0 Description: An improper authorization issue exists that could allow a hacker to manipulate the rid parameter and change the updateMessage method, which only checks whether the user is allowed to edit a messa...
Rocket.Chat 资源管理错误漏洞
Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat, which stems from the fact that a maliciously crafted message in a specific character chain may cause the chat to enter a hot loop in one of the processes, consuming CPU and making the service...
CVE-2023-28318
A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the MessageKeepHistory or MessageShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices...
CVE-2023-28317
A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order...
PT-2023-21645 · Unknown · Rocket.Chat
Name of the Vulnerable Software and Affected Versions: Rocket.Chat affected versions not specified Description: A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order. Recommendations: ...