PT-2024-34990 · Unknown · Duogeek Custom Dashboard Widget

Name of the Vulnerable Software and Affected Versions: DuoGeek Custom Dashboard Widget versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker could inject...

PT-2024-34290 · Unknown · Ninja Forms

Name of the Vulnerable Software and Affected Versions: Ninja Forms versions 3.8.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject maliciou...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2024-52419

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Clipboard Team Copy Anything to Clipboard allows Stored XSS.This issue affects Copy Anything to Clipboard: from n/a through 4.0.3...

PT-2024-35257 · Unknown · Reconstruction

Name of the Vulnerable Software and Affected Versions: ReConstruction versions 1.4.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the token parameter in token-item-create.inc.php. PoC Pass in a token parameter valu...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. LibreNMS suffers from a cross-site scripting vulnerability that stems from a stored...

PT-2024-11004

Name of the Vulnerable Software and Affected Versions janeczku/calibre-web affected versions not specified Description An improper access control issue exists, allowing users without public shelf permissions to create public shelves. This is due to the create shelf method in shelf.py not verifyin...

Vulnerability of Fortinet FortiOS operating system graphical interfaces and FortiProxy proxy servers for protecting against Internet attacks, allowing attackers to execute XSS attacks.

The vulnerability of Fortinet’s FortiOS operating system graphical interface and its FortiProxy proxy server for protecting against Internet attacks is related to improper handling of input data during the creation of web pages. Exploiting this vulnerability allows a malicious actor to execute XS...

IBM Security ReaQta 安全漏洞

IBM Security ReaQta is an AI autonomous detection and response platform from International Business Machines IBM. A security vulnerability exists in IBM Security ReaQta version 3.12, which stems from the inclusion of a cross-site scripting vulnerability. An attacker exploiting the vulnerability...

TIBCO Hawk和TIBCO Operational Intelligence 跨站脚本漏洞

TIBCO Hawk and TIBCO Operational Intelligence are both products of TIBCO Corporation, U.S.A. TIBCO Hawk is a software product that allows monitoring and management of distributed computing applications.TIBCO Operational Intelligence is a sophisticated hybrid monitoring and management application....

Laravel 参数注入漏洞

Laravel is a web application framework from the Laravel community. A parameter injection vulnerability exists in Laravel. An attacker exploiting this vulnerability can call any URL using a specially crafted query string...

UBUNTU-CVE-2024-51488

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users delete messages. This vulnerability could be exploited to forge CSRF attacks, allowing an attacker to delete messages to any...

PT-2024-35195 · Unknown · Christian Science Bible Lesson Subjects

Name of the Vulnerable Software and Affected Versions: Christian Science Bible Lesson Subjects versions n/a through 2.0 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a DOM-Based XSS vulnerabilit...

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003 version 16.07.16A1, which stems from the parameter str in the file /dbsrv.asp failing to correctly validate the length and size of the input data, which can be exploit...

WordPress plugin Slicko 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

Code-Projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email in the file /Doctor/doctorlogin.php can lead to SQL injection...

Online Shopping Portal js_data.php File Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of file...

Check Point Gaia Portal 安全漏洞

Check Point Gaia Portal is a web-based advanced interface for Gaia platform configuration from Check Point Israel. A security vulnerability exists in Check Point Gaia Portal that originates from an authenticated user being able to inject code or commands using global variables via a special HTTP...

Online Shopping Portal dom_data_two_headers.php file cross-site scripting vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that originates in the parameter admin/assets/plugins/DataTables/media/unittesting/templates/domdatatwoheaders.php. scripts lack effective filtering and escaping of...