TYPO3 访问控制错误漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in TYPO3 version 5.5.3, version 6.x up to and including version 6.3.4, and version 7.x up to and including version 7.1.0, which stems from a lack ...

CVE-2022-44026

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 3 of 6...

NetScout nGeniusONE 跨站脚本漏洞

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in nGeniusONE version 6.3.2 that stems from a cross-site scripting issue...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in versions of Apple macOS Monterey prior to 12.6.3 that stems from a memory handling issue where applications may be able to bypass privacy preferences...

FileOrbis File Management System 路径遍历漏洞

FileOrbis File Management System is a file server management product from FileOrbis, Inc. A path traversal vulnerability exists in FileOrbis File Management System versions prior to 10.6.3, which stems from an unauthenticated local file inclusion and path traversal vulnerability in the file...

Flarum 安全漏洞

Flarum is an open source forum system for the Flarum community. A security vulnerability exists in versions prior to Flarum v1.6.3 that stems from discussions that would open uncontrolled spam or unintentional replies...

PT-2023-14121 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3.6 through 6.3.20 FortiWeb versions 6.4.0 through 6.4.2 FortiWeb versions 7.0.0 through 7.0.2 Description: The issue is related to an improper neutralization of CRLF sequences in HTTP headers, also known as 'HTTP Response...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow if callback functions are enabled via the WOLFSSLCALLBACKS flag. A malicious TLS 1.3 client or network attacker can trigger a buffer over-read on the heap of 5 bytes. Note: WOLFSSLCALLBACKS is only intended fo...

CVE-2022-3633

creationtimestamp| type| source ---|---|--- 2022-10-21 14:22:49+00:00| seen| https://t.me/cibsecurity/51916...

Northstar Club Management SQL注入漏洞

Northstar Club Management is a web-based solution from Northstar, Inc. that allows organizations to manage all elements of a club, such as memberships, guests, events, and more. A security vulnerability exists in Northstar Club Management version 6.3. An attacker exploiting the vulnerability coul...

CVE-2022-36872

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

PT-2022-25345 · Openkm · Openkm

Name of the Vulnerable Software and Affected Versions: OpenKM version 6.3.11 Description: The issue allows stored XSS related to the javascript: substring in an A element. This could potentially lead to malicious script execution when a user interacts with the affected element. Recommendations: F...

CVE-2022-36394

creationtimestamp| type| source ---|---|--- 2022-08-23 22:27:07+00:00| seen| https://t.me/cibsecurity/48609...

CVE-2022-35632

creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:41+00:00| seen| https://t.me/cibsecurity/47266...

Open Source Social Network 跨站脚本漏洞

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A security vulnerability exists in Open Source Social Network v6.3 LTS, which can be exploited by an attacker to conduct a stored cross-site scripting attack using its Users Timeline module...

OpenKM 代码问题漏洞

OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, document history, and file sharing. A security vulnerability exists in OpenKM Community Edition version 6.3.10 and earlier versions. An attacker could exploit this vulnerability to...

Open Source Social Network 跨站脚本漏洞

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A security vulnerability exists in Open Source Social Network v6.3 LTS, which can be exploited by an attacker to conduct a stored cross-site scripting attack using its New Feed module...

Open Source Social Network 代码问题漏洞

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A code issue exists in Open Source Social Network v6.3 LTS that allows an attacker to upload arbitrary files to the /ossn/administrator/cominstaller directory to execute arbitrary commands using carefully...

CVE-2022-21532

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...