A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under ...
Continue ReadingMarch 23, 2023
LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.Read More ...
Continue ReadingMarch 23, 2023
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force prot ...
Continue ReadingMarch 23, 2023
The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, the package's use of `flate.NewReader` does not limit the size of the input. The ...
Continue ReadingMarch 22, 2023
An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file.Read More ...
Continue ReadingMarch 22, 2023
The Formidable PRO2PDF WordPress Plugin, version Read More ...
Continue ReadingMarch 22, 2023
Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.Read More ...
Continue ReadingMarch 22, 2023
The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version Read More ...
Continue ReadingMarch 22, 2023
Back to Main