15055 matches found
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
Design/Logic Flaw
Usedesk before 1.7.57 allows chat template injection...
Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8600 Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-49214
CVE-2023-49214 affects Usedesk prior to version 1.7.57 and enables chat template injection. The vulnerability, described consistently across NVD/Red Hat/CNNVD listings, arises from template injection in chat functionality and scores as critical (CVSS 9.8: Network attack, no privileges required, n...
Usedesk Security Breach
Usedesk is a system for bookkeeping and processing applications from Usedesk, Inc. A security vulnerability exists in Usedesk versions prior to 1.7.57 that stems from the presence of a template injection vulnerability...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
Design/Logic Flaw
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
CVE-2023-49061 concerns Firefox for iOS prior to version 120, where the Reader Mode fails to neutralize HTML tags, enabling an attacker to perform HTML template injection and potentially exfiltrate user information. Affected software: Firefox for iOS
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
Mozilla Firefox Security Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox prior to version 120, which could allow an attacker to perform HTML template injection and steal user information via reader mode...
PT-2023-7113 · Mozilla · Firefox For Ios
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 120 Description: The issue is related to the Reader Mode in Firefox for iOS, where the browser fails to neutralize HTML tags, allowing an attacker to perform HTML template injection. This could enable a remot...
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description...
Oracle Linux 9 : skopeo (ELSA-2023-6363)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6363 advisory. - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539...
golang: html/template: improper handling of special tags within script contexts
A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...