PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-9437] SecureAuth Version 9.3

bishopfox.com | vulnerability | CVE-2020-9437 | #xss | #vulnerability | #advisory | #template-injection | #secureauth | #cve-2020-9437
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Bishop Fox advisory on CVE-2020-9437: AngularJS client-side template injection in SecureAuth 9.3 allows XSS payloads via usernames or emails during authentication, fixed in 9.3.0-17.
CVE
CVE-2020-9437
Published
Collected

Related coverage

vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
research · slcyber.io
Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488)
# Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488) Get research alerts Share on social ) June 29, 2023 1 min read ### Table of Contents TOC Element Summary Impact Affected Software...
research · slcyber.io
Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489)
# Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489) Get research alerts Share on social ) April 26, 2023 2 min read ### Table of Contents TOC Element Impact Affected Software...
vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · bishopfox.com
Oracle WebLogic Node Manager allows arbitrary configuration via UNC path
Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.
Back