PT-2022-11393

Name of the Vulnerable Software and Affected Versions Subscription-Manager version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the machineDetail parameter in the /main.js file. Recommendations For Subscription-Manager version 1.0, avoid using the...

CVE-2021-41415: Improper Neutralization of Input During Web Page Generation

Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...

Prototype Pollution

convict is vulnerable to prototype pollution.A bypass of the fix for CVE-2022-22143 is possible which allows an attacker to inject properties into existing construct prototypes via the main.js and modify attributes such as proto, constructor, and prototype...

Prototype Pollution

convict is vulnerable to prototype pollution. The vulnerability exists in the convict function in main.js due to improper validation of attribute type which allows an attacker to crash the system by injecting arbitrary code...

Geutebruck Camera Deface

This module will take an existing session on a vulnerable Geutebruck Camera and will allow the user to either freeze the camera and display the last image from the video stream, display an image on the camera, or restore the camera back to displaying the current feed/stream. Module Options msf us...

CVE-2019-15714

cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations...

PT-2019-14338

Name of the Vulnerable Software and Affected Versions Entropic before 2019-06-13 Description The issue allows for a potential directory traversal attack in certain situations due to the failure to reject / and in command names in the cli/lib/main.js file. Recommendations For versions prior to...

CVE-2019-15714: Improper Limitation of a Pathname to a Restricted Directory

cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations...

openSUSE Security Update : cinnamon (openSUSE-2018-767)

This update for cinnamon fixes the following issues : Security issue fixed : - CVE-2018-13054: Fix symlink attack vulnerability boo1083067. Bug fixes : - Update to version 3.4.6 changes since 3.4.4 : - osdWindow.js: Always check the theme node on first showing - an actor's width isn't necessarily...