PHPGurukul Small CRM Cross-Site Scripting Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A cross-site scripting vulnerability exists in PHPGurukul Small CRM version v.3.0, which stems from the presence of a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via...

CVE-2023-44075

CVE-2023-44075 is a reported Cross Site Scripting vulnerability in Small CRM for PHP v3.0. The issue arises in the Address parameter and can let a remote attacker execute arbitrary code when exploiting the vulnerability. Documented impact ranges from constructive code execution to potential confi...

PT-2023-29087 · Unknown · Small Crm In Php

Name of the Vulnerable Software and Affected Versions: Small CRM in PHP version 3.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Sma...

Ransomware reinfections on the rise from improper remediation

Attack. Remediate. Repeat? Speak to any organization infiltrated by ransomware--the most dangerous malware in the world--and theyll be blunt: Theyd do anything to avoid getting hit twice. But ransomware attacks have been ramping up in 2023 and reinfections are occurring all over the globe, forcin...

CVE-2023-43331

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Cross site scripting

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Small CRM Cross-Site Scripting Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A cross-site scripting vulnerability exists in Small CRM version v3.0, which originates from a vulnerability that allows an attacker to execute arbitrary web script or HTML via the name field using a crafted payload injection...

CVE-2023-43331

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-43331

CVE-2023-43331 is an XSS in the Add User function of Small CRM v3.0, exploited by injecting crafted payloads into the Name field. Affected: Small CRM v3.0 (Add User/Name field). Root cause: inadequate input sanitization leading to script/HTML execution. Public metrics indicate CVSS v3.1 base scor...

CVE-2023-43331

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Input validation

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

CVE-2023-20250

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

CVE-2023-20250

The CVE-2023-20250 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerability resides in the web-based management interface and stems from improper validation of requests, enabling an authenticated, remote attacker with valid Administrator credentials to execute arb...

CVE-2023-20250

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

Cisco Small Business Buffer Error Vulnerability

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in Cisco Small Business that stems from improper request authentication and could allow an authenticated, remote attacker to execute arbitrary code on an affected device...

PT-2023-4964 · Cisco · Cisco Small Business Rv130W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary code on an...

Information Disclosure

github.com/bnb-chain/tss-lib is vulnerable to Information Disclosure. An attacker is able to steal the secret key shares of other participants in the signing protocol. This could happen if the attacker generates a Paillier modulus N containing small factors less than 2^100. The master key can the...

GHSA-H24C-6P6P-M3VX tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli

Impact The specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus N containing small factors less than 2^100 they can interact with other participants in the signing...

Hospital Management System SQL注入漏洞

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. An SQL injection vulnerability exists in Free Hospital Management System for Small Practices version 1.0, which stems from the fac...