Dassault Systèmes 3DEXPERIENCE 安全漏洞

Dassault Systèmes 3DEXPERIENCE is a business and innovation platform from Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes 3DEXPERIENCE versions R2023x through R2024x, which stems from susceptibility to a stored cross-site scripting attack that allows an attacker to...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Cisco Ironport Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Ironport Bruteforce Login Utility', 'Description' = % This module scans for Cisco Ironport SMA, WSA and ESA web login portals, finds AsyncO...

CVE-2024-8108

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

OPENSUSE-SU-2024:14289-1 element-web-1.11.75-1.1 on GA media

These are all security issues fixed in the element-web-1.11.75-1.1 package on the GA media of openSUSE Tumbleweed...

feliratok.eu Cross Site Scripting vulnerability OBB-3960301

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-6452

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Web Security Transaction Viewer allows Stored XSS. The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It h...

CVE-2023-6452

CVE-2023-6452 describes a Stored XSS in Forcepoint Web Security (Transaction Viewer) where the vulnerable target is the "user agent" field. The root cause is Improper Neutralization of Input During Web Page Generation, enabling an attacker that can route traffic through the Forcepoint proxy to ex...

CVE-2023-6452

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Web Security Transaction Viewer allows Stored XSS. The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It h...

CVE-2023-6452

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Web Security Transaction Viewer allows Stored XSS. The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It h...

PT-2024-14961 · Forcepoint · Forcepoint Web Security

Name of the Vulnerable Software and Affected Versions: Forcepoint Web Security versions prior to 8.5.6 Description: The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It has been determined that the user agent field i...

Forcepoint Web Security 安全漏洞

Forcepoint Web Security is a security platform from US-based Forcepoint, Inc. It provides robust protection through content-aware defense as well as cloud application discovery and monitoring. A security vulnerability exists in Forcepoint Web Security that stems from the inclusion of a cross-site...

systemcaresitsolutions.com Cross Site Scripting vulnerability OBB-3959854

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the site_id parameter in the netshop CMS system, Netcat, allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the siteid parameter in the netshop CMS system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

tauns.co.jp Cross Site Scripting vulnerability OBB-3959576

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-42611

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF via admin/adminpage.php?linkid=1&mode=delete...

eri.u-tokyo.ac.jp Cross Site Scripting vulnerability OBB-3957498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GNU gettext 安全漏洞

GNU gettext is an open source package for writing multilingual programs from the GNU community in the United States. A cross-site scripting vulnerability exists in GNU gettext, which stems from the application's lack of effective filtering and escaping of user-supplied data, and for which no...

mozilla: Fullscreen notification dialog can be obscured by document content

The Mozilla Foundation Security Advisory describes this flaw as: Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack...

Giftora 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : Giftora V 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | | Vendor :...