CVE-2022-45265

CVE-2022-45265 在由sourcecodester.com分发的Sanitization Management System 1.0中 root@kitploit: curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"' \ --form...

CVE-2022-3942

CVE-2022-3942 Sanitization Management System 中的跨站脚本漏洞 描述：Sanitization Management System v1.0 存在一个跨站脚本（XSS）漏洞，攻击者可通过在请求报价表单的备注或地址字段中注入精心构造的有效载荷，执行任意 Web 脚本或 HTML。一旦登录的工作人员或管理员用户打开该报价，XSS 即被触发——加之 Cookie 未设置 HttpOnly 标志，因此该漏洞可能被用于窃取登录用户的 Cookie。 复现步骤：...

EUVD-2022-46394

Malicious code in bioql PyPI...

EUVD-2022-43276

Malicious code in bioql PyPI...

EUVD-2022-46390

Malicious code in bioql PyPI...

EUVD-2022-42876

Malicious code in bioql PyPI...

EUVD-2022-48114

Malicious code in bioql PyPI...

EUVD-2022-47241

Malicious code in bioql PyPI...

EUVD-2022-47087

Malicious code in bioql PyPI...

EUVD-2022-47336

Malicious code in bioql PyPI...

EUVD-2022-46393

Malicious code in bioql PyPI...

EUVD-2022-43033

Malicious code in bioql PyPI...

EUVD-2022-46389

Malicious code in bioql PyPI...

EUVD-2022-46391

Malicious code in bioql PyPI...

EUVD-2022-47225

Malicious code in bioql PyPI...

EUVD-2022-47243

Malicious code in bioql PyPI...

EUVD-2022-47226

Malicious code in bioql PyPI...

EUVD-2022-47290

Malicious code in bioql PyPI...

EUVD-2022-43031

Malicious code in bioql PyPI...

EUVD-2022-47242

Malicious code in bioql PyPI...