Nagios Network Analyzer Self-XSS Vulnerability

Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A Self-XSS vulnerability exists in Nagios Network Analyzer versions prior to 2.4.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via...

Nagios 跨站脚本漏洞

Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A Self-XSS vulnerability exists in Nagios Network Analyzer versions prior to 2.4.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via...

CVE-2021-3355: Improper Neutralization of Input During Web Page Generation

A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords...

U.S. Dept Of Defense: Self XSS + CSRF Leads to Reflected XSS in https://████/

Hi Security Team, The form inputs in https://███/ Vulnerable to Self XSS Either the form was vulnerable to CSRF When these two bugs available and attacker could combine them to Perform a Reflected XSS Attack Impact Reflected XSS Execute JS Code in behave of a user System Hosts █████████ Affected...

CVE-2020-35569

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page...

Cross site scripting

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page...

CVE-2020-35569

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page...

CVE-2020-35569: Improper Neutralization of Input During Web Page Generation

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page...

PT-2021-11800

Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.6.2 mymbCONNECT24 versions through 2.6.2 Description: The issue is related to a self XSS problem that can be triggered with a crafted cookie in the login page. Recommendations: For mbCONNECT24 versions through...

Alt-N MDaemon Webmail 20.0.0 Cross Site Scripting

Exploit Title: Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting XSS Date: 2020-08-25 Exploit Author: Kailash Bohara Vendor Homepage: https://www.altn.com/ Version: Mdaemon webmail 3. We can see execution code and after saving it, each time we visits the distribution list...

Mail.ru: CSRF + XSS leads to ATO

Reflected XSS on dwar.mail.ru via POST parameter formnick There was a Self-XSS issue on Request with no CSRF Protection leading to full Account Takeover due to Insecure Session Cookies...

CVE-2020-29137

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

CVE-2020-29137

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

Design/Logic Flaw

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

CVE-2020-29137

CVE-2020-29137 affects cPanel prior to 90.0.17, with a self‑XSS vulnerability in the WHM Transfer Tool interface (SEC-577). The issue is limited to the Transfer Tool’s UI and is triggered by user input that could execute script in the victim’s browser. Exploitation details are not provided in the...

CVE-2020-29137

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

CVE-2020-29137: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

PT-2020-17097

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.17 Description The issue allows self-XSS via the WHM Transfer Tool interface. Recommendations For versions prior to 90.0.17, update to version 90.0.17 or later to resolve the issue...

cPanel Self-XSS Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A self-XSS vulnerability exists in the "WHM Transfer Tool" interface in cPanel versions prior to 90.0.17. No details of the vulnerability are available at this time...

Automattic: [intensedebate.com] SQL Injection Time Based On /js/commentAction/

intensedebate.com SQLi Time Based On /js/commentAction/ Summary: Hello, I have found a SQLI Injection Time Based on /js/commentAction/. When a user want to submit/reply to a comment, a JSON payload was send by a GET request. GET...