IP-Biter

IP-Biter - Framework Il Framework di Tracciamento Amico degli Hacker IP-Biter è un framework di tracciamento open source, facile da distribuire, che genera immagini e link di tracciamento altamente configurabili e unici da incorporare in email, siti o sistemi di chat e visualizzare, in una...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the email notification rendering process. An attacker can inject arbitrary HTML content, such as phishing links or tracking images, by crafting malicious task titles that are embedded in notification emails...

Kaspersky: Kaspersky Password Manager is vulnerable to HTML injection in the browser action pop-up via user name

Note: According to https://www.securityweek.com/kaspersky-adds-password-manager-bug-bounty-program and some other sources, Kaspersky Password Manager is in scope for this program. The program description doesn't reflect this however. Summary There is a stored XSS vulnerability in popover.html the...