35 matches found
CVE-2018-12580
library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session'useragent' in the "Login Sessions" feature...
CVE-2024-41663
Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...
EUVD-2018-4540
Malware in sbrugna...
EUVD-2020-18741
Malware in sbrugna...
EUVD-2018-13414
Malware in sbrugna...
EUVD-2019-2148
Malware in sbrugna...
EUVD-2020-21518
Malware in sbrugna...
EUVD-2020-29838
Malware in sbrugna...
EUVD-2016-1807
Malware in sbrugna...
EUVD-2018-10432
Malware in sbrugna...
EUVD-2022-48984
Malicious code in bioql PyPI...
EUVD-2022-4895
Malicious code in bioql PyPI...
EUVD-2024-3047
Malicious code in bioql PyPI...
EUVD-2022-1759
Malicious code in bioql PyPI...
CVE-2020-9007
Codoforum 4.8.8 allows self-XSS via the title of a new topic...
CVE-2020-35569
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page...
CVE-2020-4061
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...
CVE-2019-6990
A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones=zoneImageā£=1 URI...
CVE-2019-10105
CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager...
CVE-2018-20850
Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...