CVE-2024-8473

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

PT-2024-39039 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: A Cross-Site Scripting XSS vulnerability is present, where user-controlled input is not sufficiently encrypted. This could allow an attacker to retrieve the session details of a...

School Event Management System 跨站脚本漏洞

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their session details via the "view" parameter in...

CVE-2024-6620

Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. An attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to...

CVE-2024-6620

Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. An attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to...

CVE-2024-6620

Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. An attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to...

CVE-2024-6620

Honeywell PC42t, PC42tp, and PC42d printers (firmware T10.19.020016–T10.20.060398) are affected by a cross-site scripting vulnerability. The issue could allow an attacker to inject malicious script potentially leading to information disclosure, session theft, or client-side request forgery. Remed...

Honeywell多款产品 安全漏洞

Honeywell PC42tp and others are a printer from Honeywell USA. A security vulnerability exists in various Honeywell products that stems from the presence of a cross-site scripting vulnerability that could lead to information disclosure, session theft, or client request forgery. The following...

PT-2024-37751 · Honeywell · Honeywell Pc42D +1

Name of the Vulnerable Software and Affected Versions: Honeywell PC42t, PC42tp, and PC42d Printers versions T10.19.020016 through T10.20.060397 Description: The issue allows an attacker to inject malicious code, potentially leading to information disclosure, session theft, or client-side request...

CVE-2024-28973

Technical details beyond the generic description are not provided in the supplied documents. Monitor for updates from Dell and CVE List references.

PT-2024-36068 · Unknown · Phpmybackuppro

Name of the Vulnerable Software and Affected Versions: PhpMyBackupPro version 2.3 Description: A vulnerability has been discovered that could allow an attacker to execute XSS through the "/phpmybackuppro/get file.php" API endpoint, using the view parameter. This could allow an attacker to create ...

CVE-2024-5409

RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to a victim to obtain their session details...

CVE-2024-5408

Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL...

PT-2024-36022 · Rhinos · Rhinos

Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: The issue allows a remote attacker to steal user session details by submitting a specially crafted URL, exploiting an XSS vulnerability through the search parameter of the "/portal/search.htm" API endpoin...

RhinOS 安全漏洞

RhinOS is a web development framework. A security vulnerability exists in RhinOS version 3.0-1190, which originates from an easy cross-site scripting XSS attack via the search parameter in /portal/search.htm, which allows an attacker to steal details of a victim's user session by submitting a...

RhinOS 跨站脚本漏洞

RhinOS is a web development framework. A cross-site scripting vulnerability exists in RhinOS version 3.0-1190, which originates from an easy cross-site scripting XSS attack via the tamper parameter in /admin/lib/phpthumb/phpthumb.php, which allows an attacker to create malicious URLs in order to...

CVE-2024-3795

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting XSS through /admin/BackupTemplate, name / description fields. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data...

CVE-2024-3796

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting XSS through /admin/BackupSchedule, description field. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data...

CVE-2024-3794

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting XSS through /admin/AdvancedSystem, description field, all parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data...

CVE-2024-3792

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting XSS through /admin/DeviceReplication, execution range field, all parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session dat...