Security
Headlines
HeadlinesLatestCVEs

Tag

#firefox

islamnt CMS 2.1.0 Cross Site Scripting

islamnt CMS version 2.1.0 suffers from a cross site scripting vulnerability.

Packet Storm
#xss#vulnerability#windows#google#php#auth#firefox
Kleeja 1.5.4 Cross Site Scripting

Kleeja version 1.5.4 suffers from a cross site scripting vulnerability.

K-LOANS 1.4.5 Insecure Settings

K-LOANS version 1.4.5 suffers from an ignored default credential vulnerability.

Microsoft Releases Patch for Two New Actively Exploited Zero-Days Flaws

Microsoft has released software fixes to remediate 59 bugs spanning its product portfolio, including two zero-day flaws that have been actively exploited by malicious cyber actors. Of the 59 vulnerabilities, five are rated Critical, 55 are rated Important, and one is rated Moderate in severity. The update is in addition to 35 flaws patched in the Chromium-based Edge browser since last month's

Mozilla Rushes to Patch WebP Critical Zero-Day Exploit in Firefox and Thunderbird

Mozilla on Tuesday released security updates to resolve a critical zero-day vulnerability in Firefox and Thunderbird that has been actively exploited in the wild, a day after Google released a fix for the issue in its Chrome browser. The shortcoming, assigned the identifier CVE-2023-4863, is a heap buffer overflow flaw in the WebP image format that could result in arbitrary code execution when

Kolifa Download CMS 1.2 HTML Injection

Kolifa Download CMS version 1.2 suffers from an html injection vulnerability.

Kylin CMS 1.3.0 SQL Injection

Kylin CMS version 1.3.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Kaledo RD CMS 1.0 SQL Injection

Kaledo RD CMS version 1.0 suffers from a remote SQL injection vulnerability.