EUVD-2024-0128

Malicious code in bioql PyPI...

Cross Site Scripting(XSS)

OpenC3 COSMOS is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to the insecure storage of user passwords in an unencrypted format within the LocalStorage of a web browser, allows an attacker to execute malicious scripts in a user's browser...

Adult Webmaster PHP密码泄露漏洞

No description provided by source. 1 Administrative Credential Disclosure PoC: root@kali:/ curl http://localhost/home/caspers/publichtml/demo/admin/userpwdadfasdfre.txt admin:3a4ebf16a4795ad258e5408bae7be341 Vulnerable Code: + admin/common.php // Check user existance $pfile =...