2937 matches found
CVE-2023-34940
Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-34940
The CVE-2023-34940 entry concerns the Asus RT-N10LX Router, affected version 2.0.0.39, where a stack overflow is triggered via the url parameter in /start-apply.html. The vulnerability is documented across multiple sources, indicating the issue exists in devices no longer supported by the maintai...
CVE-2023-29712
Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter...
PT-2023-18285 · WordPress · Cmp – Coming Soon & Maintenance Plugin
Name of the Vulnerable Software and Affected Versions: CMP – Coming Soon & Maintenance plugin for WordPress versions up to, and including, 4.1.7 Description: The issue allows users to bypass the maintenance mode feature of the plugin. This can be achieved by including a correct cmp bypass GET...
CVE-2023-29712
Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter...
Snapchat: HTML injection on newsroom.snap.com/* via search?q=1
An unauthenticated HTML injection vulnerability was discovered on the newsroom.snap.com website. The vulnerability allowed attackers to inject arbitrary HTML code through the search engine's input parameter. This could lead to various malicious activities, such as defacement of the website or...
Design/Logic Flaw
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference IDOR vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any...
CVE-2023-33956 Parameter based Indirect Object Referencing leading to private file exposure in Kanboard
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference IDOR vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any...
CVE-2023-33956
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference IDOR vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any...
Dcat-Admin vulnerable to Stored Cross-site Scripting
A stored cross-site scripting XSS vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter...
CVE-2023-33736
A stored cross-site scripting XSS vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter...
CVE-2023-33736
A stored cross-site scripting XSS vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter...
Cross site scripting
A stored cross-site scripting XSS vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter...
CVE-2023-33736
A stored cross-site scripting XSS vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter...
PT-2023-24463 · Unknown · Dcat-Admin
Name of the Vulnerable Software and Affected Versions: Dcat-Admin version 2.1.3-beta Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter. This enables attackers to potentially manipula...
CVE-2023-0329
The Elementor Website Builder WordPress plugin before 3.12.2 does not properly sanitize and escape the Replace URL parameter in the Tools module before using it in a SQL statement, leading to a SQL injection exploitable by users with the Administrator role...
WordPress plugin Elementor Website Builder SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...
CVE-2023-2822
A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
PT-2023-21637 · Ellucian · Ellucian Ethos Identity
Name of the Vulnerable Software and Affected Versions: Ellucian Ethos Identity versions up to 5.10.5 Description: A problematic issue has been found in Ellucian Ethos Identity, where the manipulation of the url argument in an unknown function of the file /cas/logout leads to cross-site scripting...
Design/Logic Flaw
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible to exploit well known parameters in XWiki URLs to perform redirection to untrusted site. This vulnerability was partially fixed in the past for XWiki...