Cross site scripting

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...

PT-2023-30046 · Timetec · Timetec Awdms

Name of the Vulnerable Software and Affected Versions: timetec AWDMS version 2.0 Description: A Cross Site Scripting issue allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function. Recommendations: For timetec AWDMS version 2.0,...

TimeTec AWDMS Security Vulnerability

TimeTec AWDMS is an online application from TimeTec, Inc. It is used to provide an application programming interface for third-party application developers. A security vulnerability exists in TimeTec AWDMS version v.2.0, which stems from a cross-site scripting XSS vulnerability in the parameter...

CVE-2023-46483

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...

CVE-2023-46483

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...

Local Privilege Escalation in Check Point Endpoint Security Remediation Service

Symptoms - This vulnerability allows local attackers to escalate privileges on affected installations of Check Point Harmony Endpoint / ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-5828

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...

Sql injection

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...

CVE-2023-5828 Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...

CVE-2023-5828 Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...

CVE-2023-5828

Vulnerability (CVE-2023-5828) in the Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System (versions up to 20231026) arises from an SQL injection in the file login.aspx, via the tbxUserName parameter. Root cause: unsafe handling/concatenation ...

Error: "There are no apps or desktops available for you at this time" after logon StoreFront

Multiple zones are configured within a single site. Primary zone and Satellite zone both contain one Delivery Controller and one Storefront for redundancy. If the Delivery Controller in Satellite zone fails, the whole environment is still working well. But if the Delivery Controller in Primary zo...

SUSE-SU-2023:3563-2 Security update for icu73_2

This update for icu732 fixes the following issues: - Update to release 73.2 CLDR extends the support for “short” Chinese sort orders to cover some additional, required characters for Level 2. This is carried over into ICU collation. ICU has a modified character conversion table, mapping some...

Ubuntu 20.04 ESM / 22.04 ESM : ldns vulnerabilities (USN-5257-2)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5257-2 advisory. USN-5257-1 fixed several vulnerabilities in ldns. This update provides the corresponding update for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM...

The vulnerability of the dns_zone_editor module of the Control Web Panel (CWP) application, which was previously known as CentOS Web Panel, allows a hacker to execute arbitrary code.

The vulnerability of the dnszoneeditor module of the Control Web Panel formerly CentOS Web Panel relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

How To: Update time zone on NetScaler

Change the default time zone of the NetScaler...

Pure Storage FlashBlade Security Vulnerability

Pure Storage FlashBlade is a consolidated storage platform for file and object workloads from U.S.-based Pure Storage. A security vulnerability exists in FlashBlade Purity that arises from a user with access to an administrative account on a FlashBlade that is configured with a snapshot schedule...

CVE-2023-43731

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

PT-2023-28952 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the zone name parameter, potentially leading to unauthorized execution of script...

CVE-2023-3767

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...