CVE-1999-0383

ACC Tigris allows public access without a login...

EUVD-2000-0539

Malware in sbrugna...

EUVD-1999-0383

Malware in sbrugna...

EUVD-2024-45620

Malicious code in bioql PyPI...

CVE-2024-51819

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tigrisflexplatform Tigris Flexplatform tigris-flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through = 1.0.2...

CVE-2024-51819

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tigrisflexplatform Tigris Flexplatform tigris-flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through = 1.0.2...

CVE-2024-51819 WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tigrisflexplatform Tigris Flexplatform tigris-flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through = 1.0.2...

CVE-2024-51819 WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tigrisflexplatform Tigris Flexplatform tigris-flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through = 1.0.2...

CVE-2024-51819

CVE-2024-51819 affects the WordPress plugin “Tigris Flexplatform” (

WordPress plugin Tigris Flexplatform 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Tigris Flexplatform versions = 1.0.2...

WordPress Tigris Flexplatform Plugin <=1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Tigris Flexplatform Type Plugin Vulnerable versions =1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51819 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6c1287ae96d2 Credits Joshua Chan Required privilege...

GovNFT contract's owner can stop Governance NFT holders from receiving more rewards from trades' DAO fees, and such reward amounts can remain in Trading contract without belonging to anyone

Lines of code Vulnerability details Impact According to , "Profits from trading fees are paid out to Governance NFT holders in real-time...Rewards are paid out in Tigris stablecoins." However, for some legitimate reasons, such as if the corresponding Tigris stablecoin has a bug, or if the owner o...

tigris-scm.10930.n7.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1182305 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

WebSVN 'path' 参数跨站脚本漏洞

Bugtraq ID: 51109 WebSVN是一个基于Web的Subversion Repository浏览器。 通过"path"参数传递给comp.php或revision.php脚本的输入在返回用户之前svnlook.php脚本中的"getLog"函数对此缺少过滤，可被利用进行跨站脚本攻击。 构建恶意URL，诱使用户解析，可获得敏感信息或劫持用户会话 0 WebSVN 2.3.2 WebSVN 2.1 WebSVN 2.0rc4 WebSVN 2.0 WebSVN 1.7 WebSVN 1.0 厂商解决方案 WebSVN 2.3.1及之后版本已经修复此漏洞，建议用户下载使用：...

TortoiseSVN Detection (Windows SMB Login)

SMB login-based detection of TortoiseSVN. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801289"...

ViewVC Regular Expression Search Cross Site Scripting Vulnerability

ViewVC is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and steal cookie-based...

CVE-2000-0542

Technical details about CVE-2000-0542 are not provided in the connected documents. The available sources list the issue as improper Radius accounting after failed login but no public exploit, patch, or affected versions are detailed here. Monitor for updates.

CVE-2000-0542

Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds...

Дырка в Tigris

Если клиент первый раз указывает неправильный пароль при CHAP/PAP-авторизации, то не создается аккаунтинговой записи в RADIUS...