GBG Instinct 安全漏洞

GBG Instinct is an advanced anti-fraud and compliance management solution from GBG. A security vulnerability exists in the GBG Instinct UI Web Client version 6.5.0 that stems from an open redirection vulnerability in the returnUrl parameter, which allows an attacker to redirect users to a malicio...

CVE-2024-28287

A DOM-based open redirection in the returnUrl parameter of INSTINCT UI Web Client 6.5.0 allows attackers to redirect users to malicious sites via a crafted URL...

PT-2024-22381 · Unknown · Instinct Ui Web Client

Name of the Vulnerable Software and Affected Versions: INSTINCT UI Web Client version 6.5.0 Description: A DOM-based open redirection in the returnUrl parameter allows attackers to redirect users to malicious sites via a crafted URL. Recommendations: For INSTINCT UI Web Client version 6.5.0,...

CVE-2024-28287

CVE-2024-28287 describes a DOM-based open redirection in the INSTINCT UI Web Client, version 6.5.0, where the returnUrl parameter can be manipulated to redirect users to attacker‑controlled sites. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with the same root cause: im...

BIT-MATTERMOST-2023-7113

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

CVE-2024-24742 Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)

SAP CRM WebClient UI - version S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker wi...

SAP CRM Cross-Site Scripting Vulnerability

SAP CRM is a customer relationship management system from SAP, Germany. SAP CRM WebClient UI S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, A cross-site scripting vulnerability exists in WEBCUIF version 801, whi...

PT-2024-3898 · Sap · Sap Crm Webclient Ui

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102 through S4FND 106 SAP CRM WebClient UI versions WEBCUIF 701 through WEBCUIF 801 Description: The SAP CRM WebClient UI does not sufficiently encode user-controlled inputs, resulting in a Cross-Site...

PT-2024-13276 · Ibm · Sametime

Name of the Vulnerable Software and Affected Versions: Sametime affected versions not specified Description: The issue is related to a failure to invalidate sessions in Sametime. Sensitive cookie values are set in a persistent manner in Sametime Web clients, allowing these values to remain valid...

PT-2024-16128 · Eclipse · Eclipse Vert.X

Name of the Vulnerable Software and Affected Versions: Eclipse Vert.x versions prior to 4.4.7 Eclipse Vert.x versions prior to 4.5.2 Description: A memory leak occurs in the Eclipse Vert.x toolkit due to the use of Netty FastThreadLocal data structures. This issue is triggered when the Vert.x HTT...

Veeam ONE Web Client Page Fails to Load After Updating .NET Runtime Components

Veeam ONE 12.2 and 12.3 .NET Version Requirements Veeam ONE build 12.2 build 12.2.0.4093 and 12.3 build 12.3.0.4670 require and support only .NET 8.0. Note: All three component versions must match. ASP.NET Core Runtime 8.0.x Microsoft ASP.NET Core 8.0.x - Shared Framework x64 .NET Desktop Runtime...

Cross-site Scripting (XSS)

github.com/mattermost/mattermost is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper channel mention sanitization fo data in posts. This allows an attacker to inject markup into the web client which leads to cross-site scripting...

GHSA-H3GQ-J7P9-X3P4 Mattermost Cross-site Scripting vulnerability

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

Mattermost Cross-site Scripting vulnerability

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

CVE-2023-7113

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

Code injection

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

CVE-2023-7113

Mattermost CVE-2023-7113 affects Mattermost Server 8.1.6 and earlier due to improper sanitization of channel mention data in posts, enabling markup injection in the web client. Connected sources corroborate a cross-site scripting risk with versions before 8.1.7; upgrade to 8.1.7 (or later) is the...

CVE-2023-7113

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

CVE-2023-7113

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client...

The vulnerability of the web client of the IT infrastructure monitoring software Veeam ONE, related to access control errors, allows a hacker to increase their privileges.

The vulnerability of the Veeam ONE software client for IT infrastructure monitoring is related to access control errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by obtaining the NTLM hash of the reporting service account...