4183 matches found
Directory traversal
Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. The vulnerability is limited in scope, and only allows access to files with the extension...
CVE-2020-22421
74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...
CVE-2020-22421: Improper Neutralization of Input During Web Page Generation
74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...
迅易科技 74cms 跨站脚本漏洞
74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74CMS has a cross-site scripting vulnerability in version v6.0.4, which originates from /index.php?m=&c=help&a=helplist&key missing a data validation filter for user-supplied data and output. An attacker coul...
PT-2021-10762
Name of the Vulnerable Software and Affected Versions 74CMS version 6.0.4 Description A cross-site scripting XSS issue was found in 74CMS. The issue is related to the /index.php?m=&c=help&a=help list&key endpoint. This allows for potential XSS attacks. Recommendations For 74CMS version 6.0.4, as ...
CVE-2021-29113
A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page...
GitLab 访问控制错误漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, etc. GitLab CE/EE is vulnerable to an access control error, which stems from the existence of GitL...
CVE-2021-29113: Improper Control of Filename for Include/Require Statement in PHP Program
A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page...
SolarWinds Orion Platform 2020.2.0 < 2020.2.6 HF1 Multiple Vulnerabilities XSS
The version of SolarWinds Orion Platform installed on the remote host is prior to 2020.2.6 HF1. It is, therefore, affected by multiple vulnerabilities as referenced in the orionplatform202026hf1 advisory. - A security researcher found a user with Orion map manage rights could store XSS through vi...
help-narko.ru Improper Access Control vulnerability OBB-2261284
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2021-2721)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-43264: Improper Limitation of a Pathname to a Restricted Directory
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character...
PT-2021-23787
Name of the Vulnerable Software and Affected Versions Mahara versions prior to 20.04.5 Mahara versions prior to 20.10.3 Mahara versions prior to 21.04.2 Mahara versions prior to 21.10.0 Description The issue allows attackers to bypass the intended access control for HTML files via directory...
Privilege Escalation
rh-eclipse is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authentication when a user request to the local help web server...
CVE-2021-38466
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client...
CVE-2021-38466: Improper Neutralization of Input During Web Page Generation
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client...
PT-2021-22140
Name of the Vulnerable Software and Affected Versions InHand Networks IR615 Router versions 2.3.0.r4724 through 2.3.0.r4870 Description The issue concerns insufficient input validation on client requests from the help page, potentially allowing an attacker to perform a reflected cross-site...
How to fix iPhone boot loop and iPhone black screen by yourself
By Owais Sultan iPhone boot loop has become more prominent following the recent iOS upgrades. Worse, you might even experience an iPhone black screen. This is a post from HackRead.com Read the original post: How to fix iPhone boot loop and iPhone black screen by yourself...
Artica Integria IMS has an unspecified vulnerability
Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...
