PT-2018-3871

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.4.3 Description The issue is related to an open redirect vulnerability, which allows an attacker to redirect users to an untrusted site via internal URLs. This can be exploited by a remote attacker to redirect users t...

UEditor SSRF漏洞(JSP版本)分析与复现

作者： 浮萍@猎户安全实验室 公众号：猎户安全实验室 前些时间测试的时候遇到了一个系统采用了UEditor编辑器，版本为1.4.3。已知该编辑器v1.4.3版本存在SSRF漏洞，虽然是Bool型的SSRF，除了可以进行内网探测外，也可以根据web应用指纹信息，之后进行进一步的测试。 0x01 前言 查看官方的更新日志可以发现UEditor编辑器在版本1.4.3.1修复了SSRF漏洞。...

Path Traversal

Overview Versions of angular-http-server before 1.4.3 are vulnerable to path traversal allowing a remote attacker to read files from the server that uses angular-http-server. Recommendation Update to version 1.6.0 or later. Note: This was originally thought to be fixed in version 1.4.3, though...

CVE-2015-5739

The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers to conduct HTTP request smuggling attacks via a space instead of a hyphen, as demonstrated by "Content Length" instead of "Content-Length."...

CVE-2015-5740

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request with two Content-length headers...

CVE-2015-5739

CVE-2015-5739 affects Go’s net/http implementation (net/textproto/reader.go) prior to Go 1.4.3. The vulnerability arises from improper parsing of HTTP header keys, enabling remote attackers to perform HTTP request smuggling by using a space instead of a hyphen (e.g., “Content Length” vs “Content-...

Single Sign-On for Pivotal Cloud Foundry Cross-Site Scripting Vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Single Sign-On is one of the single sign-on components. A cross-site scripting...

Pivotal Software Cloud Foundry cf-release and Staticfile buildpack authentication vulnerabilities

Pivotal Software Cloud Foundry cf-release and Staticfile buildpack are both products of Pivotal Software, Inc.Cloud Foundry cf-release is an open source Platform-as-a-Service PaaS cloud computing platform that provides Cloud Foundry cf-release is an open source Platform-as-a-Service PaaS cloud...

UCMS has an override access vulnerability

UCMS is a simple open source content management system. UCMS version 1.4.3 suffers from an override access vulnerability, which can be exploited by an attacker to override the right to modify, add, or delete administrator users...

CVE-2017-7480

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

PostgreSQL PL/Java Unauthorized Operation Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java versions 1.4.3 and earlier. A remote attacker could exploit th...

PostgreSQL PL/Java Change Type Mapping Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java versions 1.4.3 and earlier. A remote attacker could exploit th...

Zulip Server Security Bypass Vulnerability

Zulip Server is a set of open source group chat application written in Python based on the Django framework . A security vulnerability exists in the implementation of the autosubscribe feature of the checkstreamexists route in versions of Zulip Server prior to 1.4.3. An attacker can exploit this...

YXcmsApp V1.4.3 'uninstall()' Function Has Cross-Site Request Forgery Vulnerability

Yxcms is an enterprise building system based on PHP and mysql technology. A cross-site request forgery vulnerability exists in the YXcmsApp V1.4.3 'uninstall' function. Due to the lack of HTTP Referer or token validation, an attacker can exploit the vulnerability to uninstall the system's...

Reflected Cross-Site Scripting Vulnerability in YXcmsApp V1.4.3 'logout' Function

Yxcms is an enterprise building system based on PHP and mysql technology. A reflective cross-site scripting vulnerability exists in the YXcmsApp V1.4.3 'logout' function. It allows an attacker to construct an XSS statement to perform a pop-up box operation and obtain information such as user...

Just Another Video Script 1.4.3 - SQL Injection

Exploit Title: Just Another Video Script 1.4.3 - SQL Injection Google Dork: N/A Date: 25.03.2017 Vendor Homepage: http://justanothervideoscript.com/ Software: http://justanothervideoscript.com/demo Demo: http://javsdemo.com/ Version: 1.4.3 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan...

Wordpress Feed Statistics Plugin V 1.4.3 feed-statistics.php 重定向漏洞

0x01 漏洞简述 URL 重定向也就是 URL跳转，攻击者可以构造URL将用户的访问重定向到指定页面。 Wordpress Feed Statistics Plugin V 1.4.3 feed-statistics.php 文件中存在重定向漏洞，攻击者通过构造url的base64编码，可以将用户的访问重定向到指定页面。 公开时间：2016-01-09 Google Dork : "inurl:wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?url=" 0x02 漏洞细节 漏洞页面：...

Logstash vulnerability CVE-2015-4152

Summary: Logstash versions 1.4.2 and prior are vulnerable to a directory traversal attack that allows an attacker to over-write files on the server running Logstash. This vulnerability is not present in the initial installation of Logstash. The vulnerability is exposed when the file output plugin...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libtool-1.4.3 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the libpng package up to version 1.4.3 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited remotely...