CVE-2016-11079

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:27+00:00| seen| https://t.me/cibsecurity/12940...

CVE-2016-11079

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL...

CVE-2016-11079

Mattermost Server (github.com/mattermost/mattermost-server) contains an XSS flaw via the redirect URL in versions before 3.0.0. The root cause is improper handling/validation of the redirect URL parameter. Impact: attacker-supplied redirect can execute scripts in a user’s browser. Remediation: up...

CVE-2016-11079

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL...

CVE-2020-11079

creationtimestamp| type| source ---|---|--- 2020-05-28 22:55:28+00:00| seen| https://t.me/cibsecurity/12380 2026-06-08 10:21:08+00:00| seen| https://gist.github.com/moizxsec/c42bfada3bf659de639c1c1c2ff88abc...

CVE-2020-11079

node-dns-sync npm module dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1...

CVE-2020-11079

node-dns-sync npm module dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1...

@blitzbank/dashboard (>=0.0.1, <=0.0.2), @bloombox/js-client (1.1.4) +22 more potentially affected by CVE-2020-11079 via dns-sync (0.1.3)

dns-sync NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on dns-sync and may be impacted: - @blitzbank/dashboard =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.1, =2.2.37, =0.0.1, =0.2.24, =0.0.1, =1.0.0, =2.0.3 and more Source cves: CVE-2020-1107...

CVE-2020-11079

Summary : CVE-2020-11079 affects the npm package node-dns-sync (dns-sync) up to version 0.2.0. The vulnerability allows execution of arbitrary commands via a vulnerable method when driven by untrusted input, potentially leading to remote code execution. A fix is available in version 0.2.1. Affect...

CVE-2020-11079 command injection fix in node-dns-sync

node-dns-sync npm module dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1...

CVE-2018-11079

CVE-2018-11079 affects Dell EMC Secure Remote Services (ESRS) prior to 3.32.00.08. The vulnerability is plaintext storage of database credentials in a configuration file, allowing an authenticated user with access to that file to obtain the password and gain access to the application database. Se...

CVE-2018-11079

creationtimestamp| type| source ---|---|--- 2018-10-17 15:49:14+00:00| seen| MISP/5bc75933-2fc0-4617-a5af-0bef0a021402...

Information disclosure

Remote Manager in Open Enterprise Server OES allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to...

Fedora Update for dhcp FEDORA-2012-11079

Check for the Version of dhcp OpenVAS Vulnerability Test Fedora Update for dhcp FEDORA-2012-11079 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Audiotran 1.4.1 (PLS File) Stack Buffer Overflow

This module exploits a stack-based buffer overflow in Audiotran 1.4.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extension is registered to Audiotran...