CVE-2023-2072

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product.  The vulnerable pages do not require privileges to access and can ...

Continue Reading
CVE-2023-36163

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.Read More ...

Continue Reading
CVE-2023-3617

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_class.php of the component Login Page. Th ...

Continue Reading
CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).Read More ...

Continue Reading
CVE-2023-36293

SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to the company.php component.Read More ...

Continue Reading
CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).Read More ...

Continue Reading
CVE-2023-31818

An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.Read More ...

Continue Reading
CVE-2023-37658

fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XS ...

Continue Reading

Back to Main

Subscribe for the latest news: