ZONE.CI 全球网

Cilium has possible unencrypted traffic between nodes when using IPsec and L7 po

Cilium intermittent HTTP policy bypass (CVE-2024-28248)CVE编号
CVE-2024-28248利用情况

Cilium has possible unencrypted traffic between nodes when using WireGuard and L

ZITADEL vulnerable to improper HTML sanitization (CVE-2024-28855)CVE编号
CVE-2024

[TagAwareCipher] - Decryption Failure (Regex Match) (CVE-2024-28864)CVE编号
CVE-2

django-wiki denial of service via regular expression (CVE-2024-28865)CVE编号
CVE-

在“/libs/clientlibs/social/enablement/core/listeners.js”中存储 XSS (CVE-2024-26045)C

`/libs/dam/gui/coral/components/admin/unifiedrenditions/clientlibs/unifiedrendit

使用通过蓝图标题注入的存储 XSS 进行管理员帐户 cookie 渗透，并在添加“新站点”时在 /siteadmin 触发 (CVE-2024-26050)CV

使用“https://author-bugbounty-65-prod.adobecqms.net/etc/workflow/wcm/templates.htm

AMS XSS - /libs/fd/dashboard/tm/gui/components/startpoint/formview (CVE-2024-260

将 XSS 存储在“/libs/granite/ui/components/coral/foundation/clientlibs/foundation/js/

将 XSS 存储在 `/libs/fd/dashboard/sm/gui/components/clientlibs/admin/js/admin.js` 中

AMS XSS - /libs/cq/gui/components/authoring/dialog/clientlibs/dialog/js/dialog.j

AMS XSS - /libs/dam/gui/coral/components/admin/reports/reportlist/clientlibs/rep

漏洞报告 - Adob​​e Experience Manager 信息泄露 (CVE-2024-26063)CVE编号
CVE-2024-26063利用情况

`/libs/dam/gui/coral/components/admin/metadataeditor/clientlibs/metadataeditor/j

AMS XSS - /libs/granite/ui/components/coral/foundation/form/advancedselect/statu

将 XSS 存储在“/foundation/js/form/response/ui/error/foundation.default.js”中（bpassing

AMS XSS - /libs/fd/exm/gui/components/expressioneditor/customtag/customtag.jsp（重

将 XSS 存储在“libs/screens/dcc/components/clientlibs/actions/cq.screens.dcc.openLink

AMS XSS - /libs/dam/gui/coral/components/admin/asyncjobs/jobdetails/metadataexpo

`libs/screens/dcc/components/fileuploaddrop/clientlibs/js/dropzone.js` 中的 DOM XS

AMS XSS - /libs/cq/searchpromote/components/colors/facetcontent.jsp（重新测试 1727950

AMS XSS - /libs/granite/operations/clientlibs/healthreports/js/healthreports.js