1049 matches found
EUVD-2024-55032
Apache Geode web-api is vulnerable to Cross-site Scripting...
CVE-2024-44088
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088
Apache Geode versions prior to 1.15.2 are vulnerable to a Cross-site Scripting (XSS) flaw in the web-api (REST) interface. The root cause is the improper sanitization of user input , which allows an attacker to inject malicious scripts by tricking a logged-in user into clicking a specially-crafte...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088: Improper Neutralization of Input During Web Page Generation
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
PT-2025-41925
Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.15.2 Description A malicious script injection issue exists in the Apache Geode web-api REST. An attacker can trick a logged-in user into clicking a specially-crafted link, leading to code execution on the...
Barco ClickShare Devices OS Command Injection (CVE-2017-9377)
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. This plugin only works...
poc-muliple-dbs
Multi Cosmos DB API A .NET 8 RESTful API demonstrating how to...
EUVD-2019-4970
Malware in sbrugna...
EUVD-2017-16897
Malware in sbrugna...
EUVD-2016-9201
Malware in sbrugna...
EUVD-2017-10516
Malware in sbrugna...
EUVD-2017-18312
Malware in sbrugna...
EUVD-2018-19229
Malware in sbrugna...
EUVD-2014-2388
Malware in sbrugna...
EUVD-2020-12550
Malware in sbrugna...