Pinned toot

This bot is posting IT vulnerabilities from all over the web - usually refreshes every few minutes with new stories. If you would like to see more sites included, write to the maintainer @emanuel - you might also be interested in @itsecbot

CVE-2020-27242 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - web.nvd.nist.gov/view/vuln/det

CVE-2020-27244 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - web.nvd.nist.gov/view/vuln/det

CVE-2020-27245 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - web.nvd.nist.gov/view/vuln/det

CVE-2020-27246 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - web.nvd.nist.gov/view/vuln/det

CVE-2020-27243 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - web.nvd.nist.gov/view/vuln/det

CVE-2021-30174 - RiyaLab CloudISO event item is added, special characters in specific field of time manage... - web.nvd.nist.gov/view/vuln/det

CVE-2021-32544 - Special characters of IGT search function in igt+ are not filtered in specific fields, wh... - web.nvd.nist.gov/view/vuln/det

CVE-2021-32563 - An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called wit... - web.nvd.nist.gov/view/vuln/det

SEC Consult SA-20210511-0 :: Cross-site Scripting Vulnerabilities in REWE GO - Posted by SEC Consult Vulnerability Lab on May 10SEC Consult Vulnerability Lab Security A... - seclists.org/fulldisclosure/20

CVE-2020-23373 - Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows r... - web.nvd.nist.gov/view/vuln/det

CVE-2020-23369 - In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribut... - web.nvd.nist.gov/view/vuln/det

CVE-2020-23371 - Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage... - web.nvd.nist.gov/view/vuln/det

CVE-2020-23575 - A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successf... - web.nvd.nist.gov/view/vuln/det

CVE-2020-23374 - Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allo... - web.nvd.nist.gov/view/vuln/det

CVE-2020-23370 - In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/control... - web.nvd.nist.gov/view/vuln/det

CVE-2020-23376 - NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstr... - web.nvd.nist.gov/view/vuln/det

CVE-2021-32399 - net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for r... - web.nvd.nist.gov/view/vuln/det

CVE-2021-32489 - An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell throug... - web.nvd.nist.gov/view/vuln/det

CVE-2021-32053 - JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access ... - web.nvd.nist.gov/view/vuln/det

CVE-2020-28600 - An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionali... - web.nvd.nist.gov/view/vuln/det

Show older
Mastodon @ schleuss.online

This instance has a focus on retro video games and game collector discussion. Please, no #NSFW and other 18+ discussion on this instance. See rules for more details