Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. Ruijie Networks RG-UAC suffers from an operating system command injection vulnerability, which originates from an unknown...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which originates from the discovery of a file containing the following information via the...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

CVE-2024-34224

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters...

LoLLMs 跨站脚本漏洞

LoLLMs is a web UI for large language multimodal systems by Saifeddine ALOUI individual developer. LoLLMs suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload...

MantisBT 安全漏洞

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. MantisBT 2.26.2 before the version of the cross-site scripting vulnerability , the vulnerability stems from the...

WBSAirback 跨站脚本漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A cross-site scripting vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload...

Online Shopping System Advanced 跨站脚本漏洞

Online Shopping System Advanced is an online store website by Puneeth Reddy H C Individual Developer. Online Shopping System Advanced suffers from a cross-site scripting vulnerability that stems from susceptibility to Reflective Cross-Site Scripting XSS attacks, in which an attacker uses a crafte...

TOTOLINK X2000R 安全漏洞

TOTOLINK X2000R is a WiFi6 wireless router from China's Gion Electronics TOTOLINK that supports Gigabit network and EasyMesh function with multi-device connectivity and wireless expansion capability. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the...

PT-2024-25895 · Unknown · Easy Affiliate Links

Name of the Vulnerable Software and Affected Versions: Easy Affiliate Links versions 3.7.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious scripts that...

D-Link DIR-845 安全漏洞

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. A cross-site scripting vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which can be exploited by an attacker to execute script in the victim's web browser using a specially crafted URL...

CVE-2023-50213

D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

PT-2024-25565 · Vinod Dalvi · Login Logout Register Menu

Name of the Vulnerable Software and Affected Versions: Vinod Dalvi Login Logout Register Menu versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can...

PT-2024-41440 · Ooo 'Пэрко' · Perco-Web

Уязвимость системы контроля доступа PERCo-Web связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

PT-2024-29031 · Andondesign · Udesign

Name of the Vulnerable Software and Affected Versions: AndonDesign UDesign versions n/a through 4.7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

Hyperion 跨站脚本漏洞

Hyperion is an open source bias or ambient lighting implementation of the Hyperion project. A cross-site scripting vulnerability exists in Hyperion version 2.0.15, which stems from the presence of a cross-site scripting XSS vulnerability that could allow an attacker to execute malicious Javascrip...

PT-2024-27060 · Teixo · Teixo

Name of the Vulnerable Software and Affected Versions: Teixo version 1.42.42-stable Description: A cross-site scripting XSS issue has been identified, which could allow an attacker to send a specially crafted JavaScript payload via the seconds parameter in the program's URL. This could result in ...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-32584

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StandaloneTech TeraWallet – For WooCommerce allows Stored XSS.This issue affects TeraWallet – For WooCommerce: from n/a through 1.5.0...