NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections.Read More ...
Continue ReadingMarch 10, 2023
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device.Read More ...
Continue ReadingMarch 10, 2023
A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted pay ...
Continue ReadingMarch 10, 2023
Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.Read More ...
Continue ReadingMarch 10, 2023
Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.Read More ...
Continue ReadingMarch 10, 2023
A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1 ...
Continue ReadingMarch 10, 2023
Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive inf ...
Continue ReadingMarch 10, 2023
An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.Read More ...
Continue ReadingMarch 10, 2023
Back to Main