4255 matches found
CVE-2023-34835
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable deletefile parameter...
CVE-2023-34835
The vulnerability CVE-2023-34835 affects Microworld Technologies eScan Management Console 14.0.1400.2281. A Cross Site Scripting flaw exists in the delete_file parameter, enabling a remote attacker to inject and execute arbitrary JavaScript. The issue is documented in PT-2023-25021 with the affec...
编号撤回
Tiny Technologies TinyMCE is a rich text editor from Tiny Technologies, USA. This CVE number has been withdrawn...
Command Execution Vulnerability in Magic R365 of Xinhuanet Technologies Ltd.
The Magic R365 from Xinhua San Technologies is a full gigabit wireless router. A command execution vulnerability exists in the Xinhua San Technologies Magic R365, which can be exploited by an attacker to gain control of the server...
Binary Vulnerability in Magic R365 of Xinhua San Technologies Limited (CNVD-2023-63799)
The Magic R365 Router is a wireless router manufactured by Xinhua San Technology Company Limited H3C. A binary vulnerability exists in the H3C Magic R365 that can be exploited by an attacker to gain control of the server...
Key Network Questions
I wrote this on 7 December 2018 but never published it until today. The following are the "key network questions" which "would answer many key questions about a network, without having to access a third party log repository. This data is derived from mining Zeek log data as it is created, rather...
PT-2023-25021 · Microworld Technologies · Escan Management Console
Name of the Vulnerable Software and Affected Versions: Microworld Technologies eScan Management console version 14.0.1400.2281 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete file parameter. This enables the attacker ...
HCL Technologies BigFix Insights 安全漏洞
HCL Technologies BigFix Insights is HCL Technologies' accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. A security vulnerability exists in HCL Technologies BigFix Insights...
HCL Technologies BigFix OSD 安全漏洞
HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. It is used for the deployment of operating systems. A security vulnerability exists in HCL BigFix OSD Bare Metal Server version 311.12 and earlier. An attacker exploits the vulnerability to use a...
HCL Technologies BigFix OSD 加密问题漏洞
HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in the HCL Technologies BigFix OSD that stems from the server using an insecure encryption algorithm...
Cross site scripting
Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...
PT-2023-21138 · Teplitsa Of Social Technologies · Leyka Plugin
Name of the Vulnerable Software and Affected Versions: Teplitsa of social technologies Leyka plugin versions = 3.29.2 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected device...
CVE-2023-24420
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
CVE-2023-24420 WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
CVE-2023-24420
CVE-2023-24420 affects the WordPress plugin Admin side data storage for Contact Form 7 (<= 1.1.1). The vulnerability is unauthenticated, allows reflected XSS in the admin-side data storage feature. Root cause is an unauthenticated input handling flaw leading to cross-site scripting. Affected p...
Exploit for Path Traversal in Thruk
Thruk-CVE-2023-34096 Thruk Monitoring Web Interface versions...
CVE-2023-33553
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...
CVE-2023-33553
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...
Authentication flaw
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...