Contao 跨站脚本漏洞

Contao is an open source content management system CMS developed using PHP. The system supports search engines, rights management, and CSS frameworks. Contao suffers from a cross-site scripting vulnerability that originates from the possibility of an untrusted back-end user injecting malicious co...

WP Brutal AI < 2.06 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC In the plugin settings, for a...

Insecure Direct Object Reference

gitlab is vulnerable to Insecure Direct Object Reference. The vulnerability allows an endpoint to reveal an issue title to the user if they craft an API call with the same issue ID...

Stored XSS in title

Description There is Stored XSS in the item title of the menu on the administrator screen. Proof of Concept Step 1. Log in to the admin screen and select Add New Item in Menu. Step 2. Specify the following Payload for the item title and save it. Step 3. Once saved, any script can be executed on t...

Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...

GHSA-JMF7-79P7-QCHQ Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...

PT-2023-4402

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 through master commit 530dbfa3 Description An out-of-bounds write issue exists in the CSR format title functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a...

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

CVE-2023-3519 Inspector The cve20233519inspector.py is a...

ABB FlowX 4.00 Information Disclosure

Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information Date: 2023-03-31 Exploit Author: Paul Smith Vendor Homepage: https://new.abb.com/products/measurement-products/flow-computers/spirit-it-flow-x-series Version: ABB Flow-X all versions before V4.00 Tested on: Kali Linux CVE:...

Boom CMS 8.0.7 Cross Site Scripting

Document Title: =============== Boom CMS v8.0.7 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2274 Release Date: ============= 2023-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 2274...

WordPress Change Price Title for WooCommerce Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Change Price Title for WooCommerce Type Plugin Vulnerable versions = 2.3 Fixed in 2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 363a9547c8ad Credits Rafie Muhammad...

Layui 跨站脚本漏洞

Layui is Layui open source Web UI component library that follows the original development model . A cross-site scripting vulnerability exists in versions prior to layui v2.8.0-rc.16. The vulnerability stems from an unknown part of the component HTML Attribute Handler, which leads to cross-site...

CVE-2023-36466

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passe...

CVE-2023-36466 Topic Title Validation Skipped When Changing Category in Discourse

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passe...

CVE-2023-36466 Topic Title Validation Skipped When Changing Category in Discourse

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passe...

CVE-2023-36466 Topic Title Validation Skipped When Changing Category in Discourse

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passe...

CVE-2023-36466

CVE-2023-36466 affects Discourse (open source discussion platform). The vulnerability lets a user bypass topic title validations (e.g., title length, emoji count, blank titles) when editing a topic. The root cause is a failure to enforce title validation in the editing flow. Impact is limited to ...

Discourse 授权问题漏洞

Discourse is an open source community discussion platform. The platform includes features such as communities, email and chat rooms. Discourse suffers from an authorization issue vulnerability that stems from allowing attackers to bypass topic title validation. Affected products and versions:...

SwiftTerm Code Injection vulnerability

Attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands...

Discourse 3.1.x < 3.1.0.beta6 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...