cassis-sec/CVE

cassis-sec/CVE

Releases0

Stars1

List of vulnerabilities that I discovered.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-22646 ↗	Jan 30, 2024Tuesday, 30 January 2024, 07:15	5.3 MEDIUM	—
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.
CVE-2024-22647 ↗	Jan 30, 2024Tuesday, 30 January 2024, 07:15	5.3 MEDIUM	—
An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames.
CVE-2024-22648 ↗	Jan 30, 2024Tuesday, 30 January 2024, 07:15	5.3 MEDIUM	—
A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment.
CVE-2024-22643 ↗	Jan 30, 2024Tuesday, 30 January 2024, 07:15	6.5 MEDIUM	—
A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets.
CVE-2023-26845 ↗	Apr 11, 2023Tuesday, 11 April 2023, 15:15	4.3 MEDIUM	—
A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors.
CVE-2023-26846 ↗	Apr 11, 2023Tuesday, 11 April 2023, 15:15	5.4 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates.
CVE-2023-26847 ↗	Apr 11, 2023Tuesday, 11 April 2023, 15:15	5.4 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates.