Remote Code Execution via unsafe classes in otherwise permitted modules

Impact The module AccessControl defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of Script Python objects. The policies defined in AccessControl severely restrict...

Sensitive Cookie Without 'HttpOnly' Flag in glpi-project/glpi

✍️ Description According to 1 we have : HttpOnly is an additional flag included in a Set-Cookie HTTP response header. Using the HttpOnly flag when generating a cookie helps mitigate the risk of client side script accessing the protected cookie 💥 Impact This vulnerability is capable of take control...

Cross-Site Request Forgery (CSRF) in hdinnovations/unit3d-community-edition

✍️ Description Attacker is able to change a user profile state to visible if a logged in user visits attacker website. 🕵️‍♂️ Proof of Concept 1.when you logged in open this POC.html in a browser 2.you can check your profile state changed to visible history.pushState'', '', '/'...

CVE-2021-36543

SeedDMS contains a CSRF vulnerability in /op/op.UnlockDocument.php affecting v5.1.x before 5.1.23 and v6.0.x before 6.0.16. A remote attacker can cause an authenticated user to unlock any document without the user’s knowledge by visiting a malicious page. Root cause is CSRF in the UnlockDocument ...

CVE-2019-14453

CVE-2019-14453 affects Comelit App lejos de casa (web) 2.8.0. A privilege-escalation flaw is triggered by modifications to domus and logged fields, related to js/bridge.min.js and login.json, enabling attackers to achieve installer/administrator level within the graphical interface (e.g., via a 1...

CVE-2021-3351

OpenPLC runtime V3 (up to 2016-03-14) is affected by a stored XSS on the Device Name field of the Add New Device page. The issue arises from improper handling of input, enabling execution of client-side code. Affected product/version details are stated; no patch/fix is described in the provided d...

Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Date: 2021-08-02 Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

CVE-2021-32807 Remote Code Execution via unsafe classes in otherwise permitted modules

The module AccessControl defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of Script Python objects. The policies defined in AccessControl severely restrict access to...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting. Processing maliciously crafted web content may lead to universal cross site scripting...

ares.unasus.gov.br Cross Site Scripting vulnerability OBB-2099679

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ares.unasus.gov.br ---|--- Open Bug...

CVE-2020-20701

CVE-2020-20701 documents a stored cross-site scripting (XSS) vulnerability in the S-CMS product, specifically affecting S-CMS PHP v3.0 . The issue allows an attacker to inject and store a crafted payload that, when viewed by a user, can cause arbitrary web scripts or HTML to be executed in the co...

CVE-2020-20700

CVE-2020-20700 describes a stored cross-site scripting (XSS) vulnerability in /app/form_add/ of S-CMS PHP v3.0. The issue arises from a crafted payload entered into the Title Entry text box, enabling execution of arbitrary web scripts/HTML. Affected software: S-CMS PHP v3.0; vulnerable component:...

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the failure of the product's outbound dialing plan to properly filter incoming data for special characters, which can be...

CVE-2021-3159

CVE-2021-3159 is a stored XSS vulnerability in Landray EKP v12.0.9.R.20160325, specifically in the /sys/attachment/uploaderServlet component. A crafted SVG, SHTML, or MHT file can cause the application to execute arbitrary web scripts or HTML. Documented impacts in the provided sources align with...

Tecnick.com TCExam 跨站脚本漏洞

Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is primarily used for online exams, among other things. TCExam suffers from a cross-site scripting vulnerability that originates. The vulnerability exists due to insufficient validation of user-supplied...

CVE-2020-22148

CVE-2020-22148 affects Piwigo 2.10.1. The vulnerability is a stored cross-site scripting (XSS) in /admin.php?page=tags that allows attackers to execute arbitrary web scripts or HTML. This is described across multiple sources in the connected documents. No remediation details are provided in the g...

CVE-2021-21800

Cross-site scripting vulnerabilities exist in the sshform.php script functionality of Advantech R-SeeNet v 2.4.12 20.10.2020. If a user visits a specially crafted URL, it can lead to arbitrary JavaScript code execution in the context of the targeted user’s browser. An attacker can provide a craft...

Froala WYSIWYG Editor 跨站脚本漏洞

Froala WYSIWYG Editor is an application. Froala WYSIWYG Editor is a cross-site scripting vulnerability that stems from an obfuscation of namespace resolution in the product. An attacker could exploit this vulnerability to obtain an administrator cookie...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly mentioned, but the tool is designed to simulate various web application vulnerabilities, including Burt Force 暴力破解漏洞, XSS 跨站脚本漏洞, CSRF 跨站请求伪造, SQL-Inject SQL注入漏洞, RCE 远程命令/代码执行, Files Inclusion...

in emoncms/emoncms

✍️ Description In CSRF attack if attacker able to change the victim email then attacker can change email to own email and get password from password reset section and then the account take over happen here. 🕵️‍♂️ Proof of Concept 1.you login in your account 2.you make a file contain the following...