1233 matches found
CVE-2021-30622
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
CVE-2021-30622
CVE-2021-30622 is a Use-After-Free vulnerability in Chromium related to WebApp Installs. Connected documents confirm the issue affects Chromium/WebApp Installs and show multiple vendor advisories and package updates (e.g., Chromium 93.x updates for Fedora and Alpine Linux) addressing this CVE. Th...
CVE-2021-30622
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
CVE-2021-30622
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
CVE-2021-30622
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome WebApp Installs. The vulnerability is caused by use after the WebApp installation is free. A remote attacker can exploit this vulnerability to execute arbitrary code on the system or cause a...
Simple Phone Book 1.0 - 'Username' SQL Injection (Unauthenticated)
Exploit Title: Simple Phone book/directory 1.0 - 'Username' SQL Injection Unauthenticated Date: 21/08/2021 Exploit Author: Justin White Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13011/phone-bookphone-directory.html Version: 1.0 Testeted on:...
Simple Phone Book/Directory 1.0 SQL Injection
Exploit Title: Simple Phone book/directory 1.0 - 'Username' SQL Injection Unauthenticated Date: 21/08/2021 Exploit Author: Justin White Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13011/phone-bookphone-directory.html Version: 1.0 Testeted on:...
jetty: Symlink directory exposes webapp directory contents
If the $jetty.base directory or the $jetty.base/webapps directory is a symlink the contents of the $jetty.base/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality...
bivouac-framework (=0.1.0a0), cornerstonecms (>=0.1.0 <=0.1.20) +6 more potentially affected by CVE-2021-23401 via flask-user (>=0.6.1 <=1.0.2.2)
flask-user PYPI version =0.6.1, =0.1.0, =0.1.0, =0.0.39, =0.8.8, =0.1.0, =0.1.1a6 Source cves: CVE-2021-23401 Source advisory: OSV:GHSA-4298-89HC-6RFV...
openSUSE 15 Security Update : jetty-minimal (openSUSE-SU-2021:2005-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2005-1 advisory. - In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a...
Cartadis Gespage 路径遍历漏洞
cartadis Cartadis Gespage is an application from cartadis Inc. a print management software that includes features such as print accounting, printer monitoring, user management, payments, quotas, and redirection rules for complete management of copies and prints. A path traversal vulnerability...
Mattermost: Specially crafted message request crashes the webapp for users who view the message
A specially crafted message request with a modified deletedat JSON parameter could crash the webapp for all users viewing the channel, or for anyone viewing a different channel if they switch to that channel afterward. This vulnerability could be exploited to prevent users from accessing a channe...
b2evolution 7.2.2 Cross Site Request Forgery
Exploit Title: b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery CSRF Exploit Author: Alperen Ergel @alpernae Vendor Homepage: https://b2evolution.net/ Software Link: https://b2evolution.net/downloads/7-2-2 Version : 7.2.2 Tested on: Kali Linux Category: WebApp Description...
b2evolution 7.2.2 - (edit account details) Cross-Site Request Forgery Vulnerability
Exploit Title: b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery CSRF Exploit Author: Alperen Ergel @alpernae Vendor Homepage: https://b2evolution.net/ Software Link: https://b2evolution.net/downloads/7-2-2 Version : 7.2.2 Tested on: Kali Linux Category: WebApp Description...
CVE-2021-32683
wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab right click - open in new tab, or copy the URL and paste it in the URL bar, ...
Cross site scripting
wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab right click - open in new tab, or copy the URL and paste it in the URL bar, ...
CVE-2021-32683 XSS through createObjectURL
wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab right click - open in new tab, or copy the URL and paste it in the URL bar, ...
CVE-2021-32683
Affected software: wire-webapp (web version of Wire). Vulnerability: cross-site scripting (CVE-2021-32683) present in versions prior to 2021-06-01-production.0 due to image handling (createObjectURL) that can execute malicious code on app.wire.com when an image is opened in a new tab or URL paste...
Wire 跨站脚本漏洞
Wire is a chat software by an individual developer. The program supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original way of saying hello, PING. A cross-site scripting vulnerability exists in wire-webapp, which can be...