Cross site scripting in XXL-job

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

CVE-2022-29770

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

Cross site scripting

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

CVE-2022-29770

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

CVE-2022-29770

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

CVE-2022-29002

A Cross-Site Request Forgery CSRF in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add...

CVE-2021-22799

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1...

Heap overflow

In Tensorflow version 2.3.0, the SparseCountSparseOutput and RaggedCountSparseOutput implementations don't validate that the weights tensor has the same shape as the data. The check exists for DenseCountSparseOutput, where both tensors are fully specified. In the sparse and ragged count weights a...

Security Bulletin: Spoofing vulnerability in Cloud Pak System (CVE-2019-4097)

Summary Spoofing vulnerability identified in Cloud Pak System formerly known as PureApplication System. It applies to Cloud Pak System, Software, and Service. Cloud Pak System has addressed this vulnerability. Vulnerability Details CVEID: CVE-2019-4097 DESCRIPTION: Spoofing vulnerability identifi...

Security Bulletin: Vulnerability in python affects OS Images for Red Hat Linux Systems shipped with Cloud Pak System (CVE-2019-10160)

Summary Vulnerabilities has been identified in python in OS Image for Red Hat Linux Systems shipped with Cloud Pak System. OS Image for Red Hat Linux Systems has addressed the vulnerability. Vulnerability Details CVEID: CVE-2019-10160 DESCRIPTION: Python urllib.parse.urlsplit and...

Ecmall v2.3.0 /seller_groupbuy.app.php SQL注入漏洞

No description provided by source...

Ecmall V2.3.0-UTF8 正式版暴力注入（爆破）

简要描述： RT，打了最新补丁 详细说明： 存在两个问题，最新版未修补： 1.后台可被爆破，导致暴力注入；（很多SQL注入点最终是为了进后台，那么这里直接暴力点） 2.模板编辑下可得shell。 漏洞证明： 暴力注入： 1.在后台登录页，点击登录后抓包： 2.设置爆破字段为password： 3.不要看burp返回，直接再次刷新页面，登录成功！ 拿shell的方法： 1.看下图，点击编辑（这一列的都可以编辑）： 2.写入shell： 3.访问这个地址： http:/...

FineCMS v2.3.0一处xss，专业盲打管理员！

简要描述： 呵呵 详细说明： 本地测试！！ 在会员空间-图书-发布-书名处插入xss代码 返回我的空间查看下待审核的图书，弹窗了！ 用google浏览器登录后台也弹窗了 后台查看源码！ 漏洞证明： 求rank，前面漏洞求审核！！...

FineCMS v2.3.0一处xss可x前台用户后台管理，专业盲打管理！#2

简要描述： 呵呵 详细说明： 本地测试 会员中心-新闻-发布主题-主题名插入xss代码 发布新闻不需要审核的，正好方便我们x前台用户 查看主题 用google浏览器登录后台看看 查看源代码 漏洞证明： 求rank 啊！！之前的漏洞求审核啊啊！！...

joomla1014-rfi.txt

============================================================================================== Joomla = v1.0.14-RC1Index.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v2.3.1 &...