Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-6142

Dev Blog v1.0 - Stored XSS

Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malicious HTML file, then guess the filename of the uploaded file and send it to a potential victim.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Armanidrisi
Products
Dev Blog
CVE-2023-6144

Dev Blog v1.0 - ATO

Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Armanidrisi
Products
Dev Blog