33 matches found
LimeSurvey 4.1.11 - Local File Inclusion
LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. id: CVE-2020-11455 info: name: LimeSurvey 4.1.11 - Local File Inclusion author: daffainfo severity: critical...
CVE-2026-11455
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function checkcmdexists of the file metagpt/utils/common.py. This manipulation of the argument mermaid.path causes command injection. The attack may be initiated remotely. A high degree of...
CVE-2026-11455
creationtimestamp| type| source ---|---|--- 2026-06-07 09:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnosjxyvqf24...
Oracle Linux 8 : kernel (ELSA-2025-11455)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11455 advisory. - tcp/dccp: Don't use timerpending in reqskqueueunlink. Guillaume Nault RHEL-66324 CVE-2024-50154 - net: ch9200: fix uninitialised access during...
CVE-2020-11455
LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php...
CVE-2024-11455
creationtimestamp| type| source ---|---|--- 2024-11-21 04:07:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113518973666453504...
CVE-2024-11455
CVE-2024-11455 – Include Mastodon Feed (WordPress) Stored XSS in the Include Mastodon Feed plugin for WordPress affects versions up to and including 1.9.5. The vulnerability arises from insufficient input sanitization and output escaping on user-supplied attributes in the include-mastodon-feed sh...
CVE-2024-11455 Include Mastodon Feed <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Include Mastodon Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'include-mastodon-feed' shortcode in all versions up to, and including, 1.9.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...
WordPress Include Mastodon Feed Plugin <= 1.9.5 is vulnerable to Cross Site Scripting (XSS)
Software Include Mastodon Feed Type Plugin Vulnerable versions = 1.9.5 Fixed in 1.9.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11455 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6b915ee78c03 Credits Peter Thaleikis...
SA40793 - CSRF vulnerability in Pulse Connect Secure / Pulse Policy Secure (CVE-2017-11455)
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A vulnerability in diag.cgi may allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens. PSIRT is no...
Ubuntu: Security Advisory (USN-4860-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2019-0246)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-2855-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2855-1] monit security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2855-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 27, 2021 https://wiki.debian.org/LTS -...
LimeSurvey Zip Path Traversals
This module exploits an authenticated path traversal vulnerability found in LimeSurvey versions between 4.0 and 4.1.11 with CVE-2020-11455 or 'LimeSurvey Zip Path Traversals', 'Description' = %q This module exploits an authenticated path traversal vulnerability found in LimeSurvey versions betwee...
LimeSurvey 4.1.11 - (File Manager) Path Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: LimeSurvey 4.1.11 - 'File Manager' Path Traversal Exploit Author: Matthew Aberegg, Michael Burkey Vendor Homepage: https://www.limesurvey.org Version: LimeSurvey 4.1.11+200316 Tested on: Ubuntu 18.04.4 CVE : CVE-2020-11455...
CVE-2020-11455
creationtimestamp| type| source ---|---|--- 2020-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48297 2020-04-14 17:13:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/limesurveyziptraversals.rb 2025-02-06...
LimeSurvey 4.1.11 - 'File Manager' Path Traversal
Exploit Title: LimeSurvey 4.1.11 - 'File Manager' Path Traversal Date: 2020-04-02 Exploit Author: Matthew Aberegg, Michael Burkey Vendor Homepage: https://www.limesurvey.org Version: LimeSurvey 4.1.11+200316 Tested on: Ubuntu 18.04.4 CVE : CVE-2020-11455 Vulnerability Details Description : A path...
LimeSurvey 4.1.11 Path Traversal
Exploit Title: LimeSurvey 4.1.11 - 'File Manager' Path Traversal Date: 2020-04-02 Exploit Author: Matthew Aberegg, Michael Burkey Vendor Homepage: https://www.limesurvey.org Version: LimeSurvey 4.1.11+200316 Tested on: Ubuntu 18.04.4 CVE : CVE-2020-11455 Vulnerability Details Description : A path...
CVE-2020-11455
LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php...