CVE-2023-49965

SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page...

CVE-2023-49965: Improper Neutralization of Input During Web Page Generation

SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page...

CVE-2023-49965

SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page...

CVE-2023-49965

The SpaceX Starlink Wi-Fi router Gen 2 (versions before 2023.48.0 ) is vulnerable to Cross-Site Scripting (XSS) due to insufficient filtering of the ssid and password parameters on the initial Setup Page (http://192.168.1.1/setup). This flaw can be chained with a Cross-Site Request Forgery (CSRF)...

CVE-2024-26784

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmiperfdomain removal On unloading of the scmiperfdomain module got the below splat, when in the DT provided to the system under test the 'power-domain-cells' property was missing. Indeed,...

Floating Chat Widget < 3.1.9 - Editor+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to "Chaty New Widget" 2...

Better Comments < 1.5.6 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. From the WordPress menu on the...

PT-2024-21479 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue occurs when using hotplug and bringing up a 32-bit CPU. The kernel asks the firmware about the BTLB information to set up the static block TLB entries, requiring write access...

UBUNTU-CVE-2024-26666

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix RCU use in TDLS fast-xmit This looks up the link under RCU protection, but isn't guaranteed to actually have protection. Fix that...

CVE-2024-3125 Zebra ZTC GK420d Alert Setup Page settings cross site scripting

A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of the file /settings of the component Alert Setup Page. The manipulation of the argument Address leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2024-3125

The CVE-2024-3125 entry concerns Zebra ZTC GK420d v1.0, specifically the Alert Setup Page component (settings) where the Address parameter can be manipulated to trigger cross-site scripting. It is exploitable remotely and the exploit has been disclosed. Documented impact is limited to I (integrit...

CVE-2024-3125 Zebra ZTC GK420d Alert Setup Page settings cross site scripting

A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of the file /settings of the component Alert Setup Page. The manipulation of the argument Address leads to cross site scripting. The attack can be initiated remotely. The exploit h...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.3), org.bonitasoft.engine:bonita-engine-standalone (7.9.3) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.9.3)

org.bonitasoft.platform:platform-resources MAVEN version 7.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.1), org.bonitasoft.engine:bonita-engine-standalone (7.10.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.10.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.4), org.bonitasoft.engine:bonita-engine-standalone (7.11.4) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.11.4)

org.bonitasoft.platform:platform-resources MAVEN version 7.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.4 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (8.0.0), org.bonitasoft.engine:bonita-engine-standalone (8.0.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (8.0.0)

org.bonitasoft.platform:platform-resources MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 8.0.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: OSV:GHSA-8VJ9-5V5Q-FHCH...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.12.1), org.bonitasoft.engine:bonita-engine-standalone (7.12.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.12.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.12.1 -...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +3 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.14.0)

org.bonitasoft.platform:platform-resources MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: GHSA-8VJ9-5V5Q-FHCH...