CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...

CVE-2022-1700

CVE-2022-1700 is an XXE vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP). The XML parser was configured to allow external entities/DTDs, affecting DLP versions before 8.8.2 and related products: Forcepoint One Endpoint (Policy Engine before 8.8.2), Forcepoint Web Securi...

formacionev.cv.uma.es Cross Site Scripting vulnerability OBB-2915690

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bhhshodrickrealty.net Cross Site Scripting vulnerability OBB-2915177

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-14056 · Forcepoint · Forcepoint Email Security +4

Name of the Vulnerable Software and Affected Versions: Forcepoint Data Loss Prevention DLP versions prior to 8.8.2 Forcepoint One Endpoint F1E with Policy Engine versions prior to 8.8.2 Forcepoint Web Security Content Gateway versions prior to 8.5.5 Forcepoint Email Security with DLP enabled...

ceu16.collegemoodle.com Cross Site Scripting vulnerability OBB-2914074

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-38639

Markdown-Nice v1.8.22 contains a Cross-site Scripting (XSS) vulnerability that enables attackers to run arbitrary script/HTML through a crafted payload in the Community Posting field. The issue is documented as CVE-2022-38639 and is referenced by multiple sources (GitHub advisory, OSV, NVD record...

pnr.dgrsdt.dz Cross Site Scripting vulnerability OBB-2896160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Password Reset Poisoning

Description Humhub uses the HTTP Host-Header in a password reset request to generate the password reset link that is sent to the user in an email without any filters or checks. This allows an attacker to craft a password reset request using a manipulated host header, resulting in reset-token...

agencecafeine.com Cross Site Scripting vulnerability OBB-2893366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-36639

CVE-2022-36639 describes a stored XSS in Garage Management System v1.0, exploitable via /client.php name parameter. The vulnerability stems from insufficient input filtering/escaping, allowing arbitrary scripts/UIHTML when a crafted payload is submitted for the name field. Affected component: /cl...

CVE-2022-36600

CVE-2022-36600 affects BlogEngine v3.3.8.0, with a cross-site scripting (XSS) vulnerability in the /blogengine/api/posts component. The issue allows injection of arbitrary web scripts/HTML via the Description field. Documents from NVD, OSV, CNNVD and others confirm the vulnerable product/version ...

web.iisfalcone-righi.edu.it Cross Site Scripting vulnerability OBB-2883821

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

komtasmakine.com.tr Cross Site Scripting vulnerability OBB-2877649

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webquestfacil.com.br Cross Site Scripting vulnerability OBB-2875540

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-36573

This CVE affects Pagekit CMS v1.0.18, where a cross-site scripting (XSS) vulnerability exists in the Markdown text box used when editing a blog post at /blog/post/edit. The issue is exposed by injecting a crafted payload that leads to arbitrary web scripts/HTML execution. The PT-2022-23480 adviso...

greenwood-direct.co.uk Cross Site Scripting vulnerability OBB-2871502

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of Ingredients Stock Management System is vulnerable to SQL injection, which originates from a security issue in the /stocks/manage A security issue exists in the id paramete...

CVE-2022-36548

CVE-2022-36548 concerns Edoc-doctor-appointment-system v1.0.1, where a stored cross-site scripting (XSS) flaw exists in the /patient/settings.php endpoint. The vulnerability arises from unsafely handling user input in the Name field, permitting attackers to inject arbitrary scripts or HTML that c...

galerieferrero.com Cross Site Scripting vulnerability OBB-2865946

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...