Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

CVE-2023-1302: bug_report/XSS-1.md at main · godownio/bug_report

A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222663.

CVE
#xss#vulnerability#web#windows#apple#php#auth#chrome#webkit
CVE-2023-0050: 2023/CVE-2023-0050.json · master · GitLab.org / cves · GitLab

An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims.

CVE-2023-27206: Best pos management system in php

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

CVE-2023-27212: CVE/xss in signup.php.md at main · xiumulty/CVE

A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.

CVE-2023-27208: CVE/xss in login.php.md at main · xiumulty/CVE

A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.

CVE-2023-27211: CVE/xss in navbar.php .md at main · xiumulty/CVE

A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

Real Time Automation 460MCBS 5.2.14 Cross Site Scripting

Real Time Automation 460MCBS version 5.2.14 suffers from a cross site scripting vulnerability.

GHSA-8jv7-vwrc-mv4g: Cross-site Scripting (XSS) in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

CVE-2023-1286

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

Gender Diversity in Cybercrime Forums: Women Users on the Rise

By Habiba Rashid It turns out that the number of women on the darker side of cybersecurity is increasing, and these stats will shock you. This is a post from HackRead.com Read the original post: Gender Diversity in Cybercrime Forums: Women Users on the Rise