CXSECURITY.COM Free Security List
WEBCVE-2024-46366. A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions ...
Dorks List - CXSecurity.com
WEBDorks List WLB2 G00GLEH4CK. See examples for inurl, intext, intitle, powered by, version, designed etc. Designed to support the cert
Vulnerability CVE-2024-40509
WEB4 days ago · Details of vulnerability CVE-2024-40509.Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serve
Vulnerability CVE-2024-23972
WEBCVE-2024-23972. Published: 2024-09-23. Description: Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is …
Vulnerability CVE-2024-8643
WEB4 days ago · Details of vulnerability CVE-2024-8643.Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking.This issue affects ValeApp: bef
Vulnerability CVE-2024-45863
WEB4 days ago · Vulnerability CVE-2024-45863. CVE-2024-45863. Published: 2024-09-27. Description: A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.
Show CWE-319: Cleartext Transmission of Sensitive Information ...
WEBAn unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as only non-sensitive information can be obtained but ...
Vulnerability CVE-2024-8608
WEB4 days ago · Vulnerability CVE-2024-8608. CVE-2024-8608. Published: 2024-09-27. Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0.
Vulnerability CVE-2024-8644
WEB4 days ago · CVE-2024-8644. Published: 2024-09-27. Description: Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking).This issue …
Vulnerability CVE-2023-46948
WEBSep 23, 2024 · Details of vulnerability CVE-2023-46948.A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to e