CVE-2022-30681

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a v ...

Continue Reading

CVSS3 - MEDIUM

CVE-2022-30678

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a v ...

Continue Reading

CVSS3 - MEDIUM

CVE-2022-30677

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a v ...

Continue Reading

CVSS3 - MEDIUM

Metasploit Weekly Wrap-Up

## BYOS: Bring your own stager ![Metasploit Weekly Wrap-Up](https://blog.rapid7.com/content/images/2022/09/metasploit-ascii-1-2.png) We try hard to make sure we have a great choice of fully-functional ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

### Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of `uri_validate` functions depending where it is used. _What kin ...

Continue Reading

CVSS3 - MEDIUM

XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form

### Impact It's possible to store JavaScript in an attachment name, which will be executed by anyone trying to move the corresponding attachment. For example, an attachment with name `>.jpg` will e ...

Continue Reading

CVSS3 - MEDIUM

OPA Compiler: Bypass of WithUnsafeBuiltins using “with” keyword to mock functions

### Impact The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` function, which allows users to provide a set of built-in functions that should be deemed unsafe — and as such rejected — by ...

Continue Reading

CVSS3 - CRITICAL

JOSE vulnerable to resource exhaustion via specifically crafted JWE

The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named `p2c` ([PBES2 Count](https://www.rfc-editor.org/rfc/rfc7518.html#section-4.8.1.2)), which determines how many PBKDF2 ...

Continue Reading

CVSS3 - MEDIUM

Back to Main

Subscribe for the latest news: