14787 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the dataOptionmessage, dataOptionsubject, and dataOptiontemplatetype parameters in /apprain/information/manage/emailtemplate/add. An attacker can execute arbitrary JavaScript code in the context of a user's...
CVE-2025-41042 Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataOptionmessage', 'dataOptionsubject' and 'dataOptiontemplatetype' parameters in /apprain/information/manage/emailtemplate/ad...
CVE-2025-41042
appRain CMF 4.0.5 is affected by a stored authenticated XSS in /apprain/information/manage/emailtemplate/add due to insufficient validation of input in data[Option][message], data[Option][subject], and data[Option][templatetype]. Impact cited includes cookie-based credential theft; exploitation s...
CVE-2025-41042 Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataOptionmessage', 'dataOptionsubject' and 'dataOptiontemplatetype' parameters in /apprain/information/manage/emailtemplate/ad...
Improper sanitization of CSS values in html/template
...
Improper handling of JavaScript whitespace in html/template
...
CVE-2024-29028
creationtimestamp| type| source ---|---|--- 2025-09-04 09:35:28+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-29028.yaml 2025-09-05 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ly4knr6me524 2025-09-27...
Improper handling of special tags within script contexts in html/template
...
Errors returned from JSON marshaling may break template escaping in html/template
...
Improper handling of empty HTML attributes in html/template
...
Improper handling of HTML-like comments in script contexts in html/template
...
Backticks not treated as string delimiters in html/template
...
Exploit for SQL Injection in Sangoma Freepbx
Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi →...
net/sched: flower: Fix chain template offload
...
appRain CMF 跨站脚本漏洞
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input in the /apprain/information/manage/emailtemplate/add endpoint. An attacker could use this vulnerability to steal the victim's cookie-base...
Linux Distros Unpatched Vulnerability : CVE-2020-11013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. lookup is a Helm template function introduced in Helm v3. ...
PT-2025-35913
Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The vulnerability is present in the /apprain/information/manage/emailtemplate/add...
NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference
...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the filepathTemplate parameter in the CreateResource endpoint, when objects are stored locally. An authenticated attacker can write arbitrary files to the server filesystem by submitting a crafted filename...
Linux Distros Unpatched Vulnerability : CVE-2023-28335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk. CVE-2023-28335 Note that Nessus relies on the...