CVE-2018-1000842

FatFreeCRM version =0.15.0 =0.16.0 =0.17.0 =0.17.2, ==0.18.0 contains a Cross Site Scripting XSS vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Javascript execution. This attack appear to be exploitable via Content with Javascript payload will be executed on e...

Denial of Service (DoS)

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Denial of Service DoS due to content continuing to be accepted from requests after maxContentLength is exceeded. PoC require'axios'.get...

Input validation

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

PYSEC-2017-13

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

Red Hat FedMsg Input Validation Vulnerability

Red Hat FedMsg is a Python package from Red Hat that is used to send messages to and receive messages from applications. A security vulnerability exists in Red Hat FedMsg 0.18.1 and earlier versions. An attacker could exploit this vulnerability to cause message detection to fail to start...