53 matches found
Seth
Seth Seth 是一个用 Python 和 Bash 编写的工具，用于通过尝试降级 RDP 连接以提取明文凭据，从而对 RDP 连接执行 MitM。它的开发旨在提高人们对正确配置 RDP 连接重要性的认识，并在渗透测试、工作坊或演讲中进行教育。作者是 Adrian Vollmer（SySS GmbH）。 用法 像这样运行： $ ./seth.sh 除非 RDP 主机与受害机器位于同一子网，否则最后一个 IP 地址必须是网关的 IP 地址。 最后一个参数是可选的。它可以包含一个命令，该命令通过按键事件注入模拟 WIN+R 在 RDP...
EUVD-2024-47712
Malicious code in bioql PyPI...
LinkJoin 安全漏洞
LinkJoin is a virtual course and meeting software by the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196 that stems from improper handling of token ownership in the password reset feature...
CVE-2023-23913
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method,...
CVE-2024-51900
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in James Hunt What Would Seth Godin Do what-would-seth-godin-do allows Stored XSS.This issue affects What Would Seth Godin Do: from n/a through = 2.1.1...
CVE-2024-51900
CVE-2024-51900 is a stored XSS in the WordPress plugin What Would Seth Godin Do (versions
CVE-2024-51900 WordPress What Would Seth Godin Do plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in James Hunt What Would Seth Godin Do what-would-seth-godin-do allows Stored XSS.This issue affects What Would Seth Godin Do: from n/a through = 2.1.1...
WordPress plugin What Would Seth Godin Do 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site...
CVE-2024-51900: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in James Hunt What Would Seth Godin Do what-would-seth-godin-do allows Stored XSS.This issue affects What Would Seth Godin Do: from n/a through = 2.1.1...
CVE-2024-6831
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for...
CVE-2024-6749
Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station windows client. If Incident report is not being used with credentials configured this flaw does not apply. Axis has released...
CVE-2024-6831
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for...
CVE-2024-6831
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for...
CVE-2024-6749
Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station windows client. If Incident report is not being used with credentials configured this flaw does not apply. Axis has released...
CVE-2024-6749
Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station windows client. If Incident report is not being used with credentials configured this flaw does not apply. Axis has released...
WordPress What Would Seth Godin Do plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by FX Patchstack in WordPress Plugin What Would Seth Godin Do versions = 2.1.1...
WordPress What Would Seth Godin Do Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)
Software What Would Seth Godin Do Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51900 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 82273a1e93d0 Credits FX Required privilege...
Ubuntu: Security Advisory (USN-6530-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...