CVE-2024-13598 XSS in iKSORIS

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS Cross-site Scripting attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run th...

CVE-2024-13597 XSS in iKSORIS

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form sent to login panel at /softcom/ with a malicious script, what causes the script to run in user's context. This vulnerability ha...

CVE-2024-13597

Technical details for CVE-2024-13597 are not publicly available in the provided documents. Monitor for updates from official sources; current materials only mention a Reflected XSS in Internet Starter and patch in v79.0.

CVE-2024-10090

CVE-2024-10090 affects Internet Starter, a module of SoftCOM iKSORIS. The flaw is a Reflected XSS in the user-creation form, allowing injected scripts to run in the victim’s browser context. The entry provides a standard CVSSv3.1 base score of 6.1 (MEDIUM) with network attack vector, no privilege...

CVE-2024-10089 XSS in iKSORIS

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for changing user's data with a malicious script, what causes the script to run in user's context. This vulnerability has...

CVE-2024-10089

Technical details about CVE-2024-10089 are not publicly available in the provided documents. No specifics on affected components, root cause, exploit info, or fixes beyond the brief description are provided.

CVE-2024-10089 XSS in iKSORIS

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for changing user's data with a malicious script, what causes the script to run in user's context. This vulnerability has...

PT-2025-16233 · Softcom · Softcom Iksoris Internet Starter

Name of the Vulnerable Software and Affected Versions: SoftCOM iKSORIS Internet Starter versions prior to 79.0 Description: The issue concerns a Stored XSS Cross-site Scripting attack. An attacker can trick a user into filling a form designed for setting delivery address with a malicious script,...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

Hackathon Starter 安全漏洞

Hackathon Starter is a sample Node.js web application by the individual developer Sahat Yalkabov. A security vulnerability exists in Hackathon Starter version 8.1.0, which stems from a user.js component that could lead to elevation of privilege...

CVE-2025-29036

CVE-2025-29036 affects hackathon-starter v8.1.0. The vulnerability is a privilege escalation via the bundled user.js component, enabling a remote attacker to elevate privileges (per the CVE description). The CVE notes a local attack vector with low to moderate overall severity (CVSS 3.1: AV L, AC...

CVE-2025-29036

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component...

PT-2025-14381 · Unknown · Hackathon-Starter

Name of the Vulnerable Software and Affected Versions: hackathon-starter version 8.1.0 Description: The issue allows a remote attacker to escalate privileges via the user.js component. This enables the attacker to gain higher access levels, potentially leading to further exploitation of the syste...

Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2508 Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13924

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...