MFlash secure messaging platform Token Theft Account Takeover

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to obtain the authorized user token and gain control of the user’s account...

GitLab Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created wiki pages from a remote...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Ivanti Endpoint Manager XSS

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS and execute arbitrary code with administrator...

Export/Import Products to Excel XSS

The vulnerability of the “Export/Import Products to Excel” plugin exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

D-Link DIR-816 Router XSS

The vulnerability of D-Link DIR-816 router’s microprogramming software is related to the lack of measures taken to protect the website structure during the processing of SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

McAfee ePolicy Orchestrator XSS

The vulnerability of the McAfee ePolicy Orchestrator console for managing enterprise security integrated solutions is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute a cross-site scripting attack remotely...