Archive
29 March 2023
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 6.5CVE-2023-27167 Public exploit
Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/ab…
-
Medium 5.4CVE-2023-26982 Public exploit
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter u…
-
Medium 5.4CVE-2022-1274 Public exploit
HTML Injection in Keycloak Admin REST API
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.