918 matches found
CVE-2024-44088
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088
Apache Geode web-api (REST) is affected by a Cross-site Scripting (XSS) vulnerability that can be exploited when a logged-in user is tricked into clicking a crafted link, potentially enabling code execution on the victim page and leading to session information theft or account takeover. All Geode...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
PT-2025-41925
Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.15.2 Description A malicious script injection issue exists in the Apache Geode web-api REST. An attacker can trick a logged-in user into clicking a specially-crafted link, leading to code execution on the...
Barco ClickShare Devices OS Command Injection (CVE-2017-9377)
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. This plugin only works...
poc-muliple-dbs
Multi Cosmos DB API A .NET 8 RESTful API demonstrating how to...
EUVD-2017-18312
Malware in sbrugna...
EUVD-2017-16897
Malware in sbrugna...
EUVD-2019-4970
Malware in sbrugna...
EUVD-2017-10516
Malware in sbrugna...
EUVD-2018-19229
Malware in sbrugna...
EUVD-2016-9201
Malware in sbrugna...
EUVD-2020-12550
Malware in sbrugna...
EUVD-2014-2388
Malware in sbrugna...
EUVD-2019-7050
Malware in sbrugna...
EUVD-2019-4971
Malware in sbrugna...