Archive
22 December 2022
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 5.3
Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint
Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. …
-
Medium 5.4CVE-2022-43271 Public exploit
Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerabil…
-
Medium 5.4CVE-2021-43657 Public exploit
A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (S…