SUSE CVE-2024-42347

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...

School Attendance Monitoring System和School Event Management System 跨站脚本漏洞

School Event Management System is a school event management system and School Attendance Monitoring System is a school attendance monitoring system. A cross-site scripting vulnerability exists in School Attendance Monitoring System and School Event Management System version 1.0. An attacker can...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34, which stems from code that can be remotely executed via a specially crafted URL...

Quivr Cross-Site Scripting Vulnerability

Quivr is an Artificial Intelligence application from Quivr Open Source. A cross-site scripting vulnerability exists in Quivr that stems from a stored cross-site scripting XSS vulnerability in the Upload Knowledge feature. An attacker exploiting this vulnerability could upload a file via a URL,...

Discourse Security Breach

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email and chat room features. Discourse suffers from a security vulnerability that stems from a carefully crafted malicious URL that degrades availability and leads to a denial o...

CVE-2024-28623

creationtimestamp| type| source ---|---|--- 2024-03-13 09:26:56+00:00| seen| https://t.me/ctinow/206485 2024-03-13 09:26:58+00:00| seen| https://t.me/ctinow/206487 2025-08-19 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2xp2l2v 2025-11-03 21:02:28+00:00| seen...

CVE-2023-23896

Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17...

CVE-2023-6918

creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:45+00:00| seen| https://t.me/ctinow/162803 2024-01-12 13:12:01+00:00| seen| https://t.me/ctinow/167232 2025-02-15 04:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4528 2026-02-19 14:20:24+00:00| seen|...

CVE-2023-48496

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

The vulnerability of the Microsoft Power Platform Connector’s application programming interface, related to errors in information representation by the user interface, allows a hacker to perform a spear-phishing attack.

The vulnerability of the Microsoft Power Platform Connector’s application programming interface is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out a spear-phishing attack by sending the user a specially...

PT-2023-7607 · Microsoft · Power Platform Connector

Name of the Vulnerable Software and Affected Versions: Microsoft Power Platform Connector affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow a remote attacker to conduct a spoofing attack by sendi...

CVE-2023-46385

LOYTEC electronics GmbH LINX Configurator all versions is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration...

Zyxel NAS326 Operating System Command Injection Vulnerability

Zyxel NAS326 is a cloud storage NAS from China Heqin Zyxel. An operating system command injection vulnerability exists in Zyxel NAS326 V5.21AAZF.14C0 and NAS542 V5.21ABAG.11C0 and prior versions, which stems from incorrect neutralization of a special element that could allow an unauthenticated...

The vulnerability of the Universal Monitoring System Interface of Zabbix, which allows attackers to perform cross-site scripting attacks

The vulnerability of the Zabbix monitoring system’s universal interface is related to insufficient validation of input data during the processing of the URL fields in the Maps elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2023-39067

Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL...

CVE-2023-4279

creationtimestamp| type| source ---|---|--- 2023-09-04 16:16:26+00:00| seen| https://t.me/cibsecurity/69784 2023-09-24 08:31:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5193 2025-11-16 20:20:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3m5rjui7ivl2g...

UBUNTU-CVE-2023-1279

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project...

CVE-2018-25089

A vulnerability was found in glb Meetup Tag Extension 0.1 on MediaWiki. It has been rated as problematic. This issue affects some unknown processing of the component Link Attribute Handler. The manipulation leads to use of web link to untrusted target with window.opener access. Upgrading to versi...

CVE-2018-25089

CVE-2018-25089 affects glb Meetup Tag Extension for MediaWiki (version 0.1). Root cause involves the Link Attribute Handler allowing manipulation leading to a web link being opened in a context with window.opener access (classic reverse tabnabbing risk). Upgrading to version 0.2 mitigates the iss...

CVE-2018-25089 glb Meetup Tag Extension Link Attribute reverse tabnabbing

A vulnerability was found in glb Meetup Tag Extension 0.1 on MediaWiki. It has been rated as problematic. This issue affects some unknown processing of the component Link Attribute Handler. The manipulation leads to use of web link to untrusted target with window.opener access. Upgrading to versi...