M Nadeem Qazi

7 exploits Active since May 2023
CVE-2023-4696 NOMISEC CRITICAL WRITEUP
memos < 0.13.2 - Improper Access Control
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.
CVSS 9.8
CVE-2023-4698 NOMISEC HIGH WRITEUP
memos < 0.13.2 - Improper Input Validation
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.
CVSS 7.5
CVE-2023-2859 NOMISEC HIGH WRITEUP
nilsteampassnet/teampass <3.0.9 - Code Injection
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
CVSS 8.8
CVE-2023-2516 NOMISEC MEDIUM WRITEUP
TeamPass < 3.0.7 - Stored Cross-Site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
CVSS 5.4
CVE-2023-33977 NOMISEC HIGH WRITEUP
Kiwi TCMS < 12.4 - Stored Cross-Site Scripting via File Upload Bypass
Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potentially dangerous files from being uploaded and Content-Security-Policy definition to prevent cross-site-scripting attacks. The upload validation checks were not 100% robust which left the possibility to circumvent them and upload a potentially dangerous file which allows execution of arbitrary JavaScript in the browser. Additionally we've discovered that Nginx's `proxy_pass` directive will strip some headers negating protections built into Kiwi TCMS when served behind a reverse proxy. This issue has been addressed in version 12.4. Users are advised to upgrade. Users unable to upgrade who are serving Kiwi TCMS behind a reverse proxy should make sure that additional header values are still passed to the client browser. If they aren't redefining them inside the proxy configuration.
CVSS 8.1
CVE-2023-3009 NOMISEC MEDIUM WRITEUP
nilsteampassnet/teampass <3.0.9 - XSS
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
CVSS 5.4
CVE-2023-2591 NOMISEC MEDIUM WRITEUP
TeamPass < 3.0.7 - Cross-Site Scripting
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
CVSS 5.4