apache__jspwiki_CVE-2019-10077_2_11_0_M4_fixed

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

apache__jspwiki_CVE-2019-10077_2-11-0-M3

Apache JSPWiki 2.11 - Documentazione root@kitploit: Concesso in licenza all'Apache Software Foundation ASF secondo uno o più accordi di licenza con i contributori. Vedere il file NOTICE distribuito con questo lavoro per informazioni aggiuntive riguardanti la proprietà del copyright. L'ASF concede...

CVE-2026-10077

creationtimestamp| type| source ---|---|--- 2026-07-02 07:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkhkvusl2g 2026-07-02 20:05:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotdw4dge26...

CVE-2026-10077

The affected product is the YOOtheme WordPress theme (prior to 5.0.35). The issue arises in the bundled front-end framework that can treat certain HTML attributes, allowed by wp_kses_post(), as markup, enabling Stored XSS when a user with the Author role views a post. The root cause is improper h...

CVE-2020-10077

GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk...

CVE-2025-10077

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

CVE-2025-10077

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

CVE-2025-10077 SourceCodester Online Polling System registeracc.php sql injection

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

Linux Distros Unpatched Vulnerability : CVE-2014-10077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hashslice in lib/i18n/coreext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service application crash via a call in...

CVE-2015-10077

CVE-2015-10077 affects webbuilders-group silverstripe-kapost-bridge 0.3.3. The vulnerability is in KapostService.php (index/getPreview) and enables SQL injection via insufficient input sanitization. Remote attacker could exploit it; upgrade to 0.4.0 is recommended. Patch 2e14b0fd0ea35034f90890f36...

Mageia: Security Advisory (MGASA-2018-0491)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache JSPWiki < 2.11.0.M4 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-10077

creationtimestamp| type| source ---|---|--- 2019-05-20 21:47:20+00:00| seen| https://t.me/cvemitreorg/103 2025-08-16 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd774nv2y...

CVE-2019-10077

CVE-2019-10077 affects Apache JSPWiki 2.9.0 to 2.11.0.M3 via a crafted InterWiki link that triggers an XSS vulnerability, potentially enabling session hijacking. The vulnerability is tied to JSPWiki before 2.11.0.M4 (as referenced by OpenVAS) and related advisories; upgrading to 2.11.0.M4 or late...

Updated ruby-i18n packages fix security vulnerability

A flaw was found in the i18n gem before 0.8.0 for Ruby. The Hashslice in lib/i18n/coreext/hash.rb allows remote attackers to cause a denial of service application crash via a call in a situation where :somekey is present in keepkeys but not present in the hash CVE-2014-10077...

[SECURITY] [DLA 1584-1] ruby-i18n security update

Package : ruby-i18n Version : 0.6.9-2+deb8u1 CVE ID : CVE-2014-10077 Debian Bug : 913093 It was discovered that there was a remote denial-of-service vulnerability in ruby-i18n, a I18n and localization solution for Ruby. An application crash could be engineering a situation where :somekey is prese...

CVE-2014-10077

creationtimestamp| type| source ---|---|--- 2018-11-06 19:23:35+00:00| seen| https://t.me/cibsecurity/1069...

CVE-2014-10077

Hashslice in lib/i18n/coreext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service application crash via a call in a situation where :somekey is present in keepkeys but not present in the hash...

CVE-2014-10077

Hashslice in lib/i18n/coreext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service application crash via a call in a situation where :somekey is present in keepkeys but not present in the hash...

CVE-2014-10077

CVE-2014-10077 – i18n gem (Ruby): The vulnerability is in Hash#slice implemented in lib/i18n/core_ext/hash.rb, affecting i18n before 0.8.0. A remote attacker can trigger a denial of service (application crash) when a key (:some_key) is present in keep_keys but absent from the hash. This is due to...