📦 Syspass

A host header injection vulnerability in SysPass 3.2x allows attackers to inject malicious JavaScript from arbitrary domains, which executes in victims' browsers when they access the vulnerable applic...

This vulnerability in Syspass 3.2.x allows attackers to access the web application's source code by exploiting improper filename handling in the account file upload feature. This can expose sensitive ...

This cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to inject malicious scripts into the client name parameter, which could execute arbitrary JavaScript in users' browsers....