Search: “code injection”

2 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 1931 Malware 1436 Exploit / PoC 866 Ransomware 518 Threat actor 309 Data breach 286 AI safety & security 130 Phishing & fraud 108 Policy & legal 63 Industry 49 Advisory 48 Research 45 Tools 22 AI tools & infra 15

SeverityAll critical 2456 high 1812 medium 1304 low 162 info 123

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

Cisco fixed a stored cross-site scripting flaw in Industrial Ethernet 1000 series switches exploitable by authenticated remote users.

Insufficient validation of user-supplied input in the web-based management interface of Cisco Industrial Ethernet 1000 Series Switches allows stored XSS. An authenticated remote attacker can inject malicious code into specific interface pages and execute arbitrary script in another user's context. Exploitation requires valid credentials; Cisco has released software updates.

Cisco Security AdvisoriesAug 19, 16:00 UTC · 27d agoAdvisory

USN-8747-1: Beets vulnerability

Ubuntu released USN-8747-1 fixing a Beets web interface flaw that let attackers inject HTML or execute JavaScript via untrusted media metadata.

Ubuntu Security Notice USN-8747-1 addresses a vulnerability in the Beets music library manager, which incorrectly escaped untrusted media metadata in its web interface. An attacker could exploit this to inject arbitrary HTML or execute arbitrary JavaScript code in a user's browser. Updated packages are available for affected Ubuntu releases.

Ubuntu Security Noticesupdated Sep 11, 12:03 UTC · 4d agofirst Sep 10, 15:56 UTC · 5d agoAdvisory 13 sources