PT-2023-10258 · Walrusirc · Walrusirc

Name of the Vulnerable Software and Affected Versions: juju2143 WalrusIRC version 0.0.2 Description: A problem was found in the function parseLinks of the file public/parser.js. The manipulation of the argument text leads to cross-site scripting. The attack may be initiated remotely...

[SECURITY] Fedora 36 Update: golang-github-multiformats-multibase-0.0.3-3.20220213gitf067816.fc36

Implementation of multibase parser in go...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34059

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Sixfab 安全漏洞

Sixfab is a pip package for individual developers. A security vulnerability exists in the Sixfab-Tool package in PyPI versions v0.0.2 through v0.0.3. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

[SECURITY] Fedora 36 Update: golang-github-cli-gh-0.0.3-1.20220614git9dbbfe2.fc36

A Go module for interacting with gh and the GitHub API from the command line...

GHSA-7CRP-P2VC-69R7 Apache James Hupa Webmail application Cross-site Scripting Vulnerabilities

Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed. This issue was...

Apache James Hupa Webmail application Cross-site Scripting Vulnerabilities

Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed. This issue was...

GHSA-GCJ7-J438-HJJ2 Smokescreen SSRF via deny list bypass

The primary use case for Smokescreen is to prevent server-side request forgery SSRF attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Smokescreen also offers an option to deny access to additional e.g., external URLs by way of...

PT-2022-16904 · Unknown · Smokescreen

Name of the Vulnerable Software and Affected Versions: Smokescreen versions prior to 0.0.3 Description: Smokescreen is a simple HTTP proxy designed to prevent server-side request forgery SSRF attacks by blocking access to certain URLs. It also features a deny list to restrict access to additional...

[SECURITY] Fedora 33 Update: libzapojit-0.0.3-19.fc33

GLib/GObject wrapper for the OneDrive and Hotmail REST APIs. It supports OneDrive file and folder objects, and the following OneDrive operations: - Deleting a file, folder or photo. - Listing the contents of a folder. - Reading the properties of a file, folder or photo. - Uploading files and phot...

Free of uninitialized memory in adtensor

An issue was discovered in the adtensor crate through 0.0.3 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix...

Mohamed Dief Discord-Recon 操作系统命令注入漏洞

Mohamed Dief Discord-Recon is a Mohamed Dief open source application. It is used to perform the reconnaissance process b from Discord. A code injection vulnerability exists in Discord-Recon version 0.0.3 and earlier versions, which can be exploited by a remote attacker to be able to overwrite any...

Remote code execution

Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the system resulting in remote code execution. This issue has...

PT-2021-18231 · Unknown · Discord Recon Server

Name of the Vulnerable Software and Affected Versions: Discord Recon Server versions prior to 0.0.3 Description: A vulnerability in Discord Recon Server could be exploited to read internal files from the system and write files into the system, resulting in remote code execution. The issue has bee...

CVE-2021-26068

An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template injection vulnerability...

PT-2020-6965

Name of the Vulnerable Software and Affected Versions trim versions prior to 0.0.3 trim affected versions not specified, but all versions are mentioned as vulnerable in some sources Description The issue is related to the trim function in the trim package, which is vulnerable to Regular Expressio...

Malicious Package in angluar-cli

Version 0.0.3 of angluar-cli contains malicious code as a postinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed the package attempts to remove files and stop processes related to McAfee antivirus...

gulp-styledocco injection vulnerability

gulp-styledocco is a package for generating documentation from stylesheets and style guide documentation. A security vulnerability exists in gulp-styledocco 0.0.3 and earlier versions, which stems from the program failing to clean up the 'options' parameter. An attacker can exploit this...

gksu-polkit privilege exploit

gksu-polkit is a package for authenticating users to enter commands. A privilege-lifting vulnerability in gksu-polkit version 0.0.3-6.fc18 can be exploited by an attacker to execute arbitrary code with administrative privileges and take control of a vulnerable computer...