Lucene search
+L

2534 matches found

zdt
zdt
added 2021/10/19 12:0 a.m.344 views

Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection Exploit

Exploit Title: Online Motorcycle Bike Rental System 1.0 - Blind Time-Based SQL Injection Unauthenticated Exploit Author: Chase ComardelleCASO Vendor Homepage: https://www.sourcecodester.com/php/14989/online-motorcycle-bike-rental-system-phpoop-source-code.html Software Link:...

7.4AI score
SaveExploits0
OSV
OSV
added 2021/10/18 3:15 p.m.7 views

DEBIAN-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS8.5AI score0.01564EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/18 3:15 p.m.24 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS9.5AI score
SaveExploits0References1
OSV
OSV
added 2021/10/18 3:15 p.m.5 views

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS6.8AI score0.03057EPSS
SaveExploits1References3
OSV
OSV
added 2021/10/18 3:15 p.m.6 views

UBUNTU-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS7.3AI score0.01564EPSS
SaveExploits1References3
OSV
OSV
added 2021/10/18 3:15 p.m.18 views

PYSEC-2021-849

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS2.4AI score0.01564EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/10/18 3:15 p.m.6 views

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS5.8AI score0.03057EPSS
SaveExploits1References4
Prion
Prion
added 2021/10/18 3:15 p.m.29 views

Design/Logic Flaw

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

7.5CVSS9.2AI score0.03057EPSS
SaveExploits1References3Affected Software3
UbuntuCve
UbuntuCve
added 2021/10/18 3:15 p.m.22 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS7.2AI score0.01564EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/18 3:15 p.m.6 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS5.8AI score0.01564EPSS
SaveExploits1References2
PyPA
PyPA
added 2021/10/18 3:15 p.m.44 views

PYSEC-2021-849

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS7AI score0.01564EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2021/10/18 2:38 p.m.38 views

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.6AI score0.03057EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/10/18 2:36 p.m.55 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS9.6AI score0.01564EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/10/18 2:36 p.m.32 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8AI score0.01564EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.11 views

Sanitize 输入验证错误漏洞

Sanitize is an HTML and CSS cleaner by Ryan Grove, an individual developer in the United States, which supports removing HTML and CSS from strings, among other things. Sanitizer suffers from an input validation error vulnerability that stems from OWASP Java HTML Sanitizer before 20211018.1 not...

9.8CVSS7.2AI score0.03057EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2021/10/18 12:0 a.m.6 views

PT-2021-23638 · Owasp · Owasp Java Html Sanitizer

Name of the Vulnerable Software and Affected Versions: OWASP Java HTML Sanitizer versions prior to 20211018.1 Description: The issue is related to the improper enforcement of policies associated with the SELECT, STYLE, and OPTION elements. This affects the OWASP Java HTML Sanitizer...

9.8CVSS8.3AI score0.03057EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/10/18 12:0 a.m.5 views

PT-2021-23639 · Unknown +1 · Bluemonday +1

Name of the Vulnerable Software and Affected Versions: bluemonday versions prior to 1.0.16 for Go bluemonday versions prior to 0.0.8 for Python in pybluemonday Description: The bluemonday sanitizer does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements,...

9.8CVSS9.1AI score0.01564EPSS
SaveExploits1References20
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.10 views

David Kitchen bluemonday 安全漏洞

David Kitchen bluemonday is a David Kitchen open source application . HTML cleaner for implementation in Go. A security vulnerability exists in bluemonday sanitizer, which originates in bluemonday before 1.0.16 in Go and before 0.0.8 in Python in pybluemonday, that does not correctly enforce the...

9.8CVSS8.3AI score0.01564EPSS
SaveExploits1References2
zdt
zdt
added 2021/09/29 12:0 a.m.328 views

WordPress Select All Categories and Taxonomies 1.3.1 Plugin - Reflected Cross-Site Scripting

Exploit Title: WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting XSS Author: 0xB9 Software Link: https://downloads.wordpress.org/plugin/select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons.1.3.1.zip Version: 1.3.1 Tested on: Windows 10...

6.1CVSS0.6AI score0.10358EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2021/09/29 12:0 a.m.264 views

WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting XSS Date: 2/15/2021 Author: 0xB9 Software Link: https://downloads.wordpress.org/plugin/select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons.1.3.1.zip Version: 1.3.1 Tested...

6.1CVSS6.2AI score0.10358EPSS
SaveExploits5
Rows per page
Query Builder