PT-2023-21780 · Softmed · Softmed Selfpatron

Name of the Vulnerable Software and Affected Versions: Softmed SelfPatron versions prior to 2.0 Description: The issue affects Softmed SelfPatron, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For versions prior to 2.0, update to...

Rockwell Automation ArmorStart ST Cross-Site Scripting Vulnerability (CNVD-2023-44292)

Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view and modify sensitive data or...

PT-2023-2780 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to the fixed version Description: Multiple reflected cross-site scripting XSS vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility, allowing an attacker to run JavaScript in the context of the...

CVE-2021-44196 XSS in UBIT Information Technologies Student Information Management System

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in UBIT Information Technologies Student Information Management System. This issue affects Student Information Management System: before 20211126...

CVE-2022-34312 IBM CICS TX information disclosure

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

PT-2022-5216 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.13.0 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. An attacker can exploit this by convincing a victim to visit a URL referencing a vulnerable page,...

EUVD-2022-33040

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users...

The vulnerability of the WhatsApp messaging and video call application, related to the lack of security measures for its web page structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the WhatsApp messaging and video call application is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Cross site scripting via canonical URL

Date : 2022-05-05 CVE ID : CVE-2022-24899 Description Untrusted users can inject malicious code into the canonical tag, which is then executed on the web page front end. Affected versions Contao 4.13 up to 4.13.2 Suggested solution Update to Contao 4.13.3. Workaround Disable canonical tags in the...

The vulnerability of the Controller.class.php file on the high-performance PHP Workman server platform allows attackers to execute cross-site scripting attacks against Redis database management systems.

The vulnerability of the Controller.class.php file on the high-performance PHP Workman socket service platform is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the implementation of the automatic update server method for domain names in the Dynamic DNS system, in the embedded operating system OpenWrt, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the implementation of the automatic update server method in Dynamic DNS systems for domain names in the OpenWrt embedded operating system is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a remote attacker to compromi...

The vulnerabilities of the formatting.php and SanitizeFileName.php components of the WordPress content management system allow attackers to compromise data integrity.

The vulnerability of the formatting.php and SanitizeFileName.php components of the WordPress content management system is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the DAViCal calendar exchange server, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the DAViCal calendar exchange server is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially crafted HTML page...

The vulnerability of the server management application for CentOS Web Panel lies in the lack of security measures for the web page structure, allowing attackers to elevate their privileges to the root level.

The vulnerability of the CentOS Web Panel administration application is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root through the email address list page...

The vulnerability of Cisco Unified Communications Domain Manager relates to insufficient protection of the website structure, allowing attackers to inject arbitrary code into the uploaded web pages.

The vulnerability of the Cisco Unified Communications Domain Manager relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted URI address from a remote location...

Microsoft Internet Explorer 11 - MSHTML CPaste­Command::Convert­Bitmapto­Png Heap Buffer Overflow (MS14-056)

Security Settings - Choose a zone - Scripting should prevent websites from programmatically copy/pasting an image. Disabling execution of scripts on web-pages altogether will have the same effect. Please note that neither option prevents a website from social engineering the user into typing a...

Web page content can display misleading security information

Dialogs such as the security information dialog and download dialog are displayed over the top of the webpage content. In some cases, webpage content will be incorrectly displayed on top of the dialogs, or over parts of the dialogs. This content can then display misleading security information,...

sBlog 0.7.3 Beta Cross Site Request Forgery

!-- - Product : sBlog - - Version : 0.7.3 Beta - - Website : http://www.sblog.se - - Author : 0x90 - - Homepage: WwW.0x90.CoM.Ar - - Contact : Gunsat0x90dotcomdotar - - Problem : Cross Site Request Forgery Vulnerability - - Sumary : sBlog has, by default, no CSRF protection, this may allow an...

Alert! A web page malicious script effects code summary Delivery-vulnerability warning-the black bar safety net

The following code is only for study and research use, please do not use the deceased person, resulting in loss of I am not responsible for, Thank you! 1, format the hard disk object id="scr" classid="clsid:06290BD5-48AA-11D2-8 4 3 2-006008C3FBFC" /object script scr. Reset; scr...

Microsoft Internet Explorer 6 - URL Local Resource Access

source: https://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Internet Explorer 6 SP1. Specifically, a...