12 matches found
CVE-2019-16762
creationtimestamp| type| source ---|---|--- 2024-02-20 16:22:27+00:00| seen| https://t.me/ctinow/188653...
rsanic (>=0.1.1 <=0.4.0), sanic-cors (>=0.4.1 <=0.4.1.4) +1 more potentially affected by CVE-2017-16762 via sanic (>=0.3.1 <=0.5.0)
sanic PYPI version =0.3.1, =0.1.1, =0.4.1, =0.5.0, =0.5.0.1 Source cves: CVE-2017-16762 Source advisory: OSV:GHSA-MPMF-HR8P-P49G...
CVE-2019-16762
CVE-2019-16762 describes a discrepancy between SLP consensus rules and slpjs validation caused by specially crafted Bitcoin scripts, enabling a potential hard-fork from the SLP consensus. Multiple linked sources identify slpjs as the affected component and show that upgrading to version 0.21.4 or...
CVE-2019-16762 Validator parsing discrepancy due to string encoding in NPM slpjs
A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to...
Fedora 27 : python-sanic (2017-c15b709e32)
Update to 0.6.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for python-sanic FEDORA-2017-c15b709e32
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python-sanic FEDORA-2017-5808f488a5
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-16762
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...
CVE-2017-16762
Affected software: Sanic before 0.5.1. Vulnerability: directory traversal that allows reading arbitrary files (demonstrated via /static/..%2f). Root cause: improper handling/normalization of the static file path. Impact: potential partial confidentiality compromise. Remediation: upgrade to Sanic ...
CVE-2017-16762
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...
Unfixed XSS vulnerability at www.westword.com
Security researcher PaPPy, has submitted on 22/12/2008 a cross-site-scripting XSS vulnerability affecting www.westword.com, which at the time of submission ranked 16762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...