CVE-2016-11064

Mattermost Desktop App fixed for CVE-2016-11064. Before 3.4.0, it is vulnerable to code execution via injection where strings could be executed as code. Affected component: Mattermost Desktop App. Root cause: injection allowing code execution through untrusted input during code segment constructi...

CVE-2016-11063

Mattermost Server prior to 3.5.1 is affected by a Cross‑Site Scripting (XSS) vulnerability via the file preview feature. This is confirmed across multiple sources (SUSE SUSECVEs, Red Hat, OpenSUSE advisories and OSV/NVD entries). The root cause is described as an XSS condition in the file preview...

CVE-2016-11062

Mattermost Server prior to 3.5.1 is affected by CVE-2016-11062, where email address verification can be bypassed. This vulnerability is described across multiple sources (NVD, Red Hat, CNVD, OSV, etc.). The available documents do not provide concrete exploitation details, impact specifics beyond ...

Security Bulletin: Multiple vulnerabilities in GSKit affect IBM Workload Scheduler

Summary GSKit is used by IBM Workload Manager and is vulnerable to some OpenSSL vulnerabilities. IBM Workload Manager has addressed the applicable CVEs using an updated version of GSKit libraries. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service...

SUSE-SU-2020:1659-1 Security update for guile

This update for guile fixes the following issues: - CVE-2016-8605: Fixed thread-unsafe umask modification bsc1004221...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2020:1553-1)

This update for libexif to 0.6.22 fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in...

SUSE SLES12 Security Update : libexif (SUSE-SU-2020:1534-1)

This update for libexif fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

EulerOS 2.0 SP2 : apr-util (EulerOS-SA-2020-1639)

According to the version of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-1647)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2020-1637)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for zsh (EulerOS-SA-2020-1636)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2020-1620)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1626)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1667)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2020-1639)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-10711

creationtimestamp| type| source ---|---|--- 2020-06-15 20:46:05+00:00| seen| https://t.me/VulnerabilityNews/15223 2020-06-15 20:55:18+00:00| seen| https://t.me/cibsecurity/12750...

Sql injection

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

CVE-2018-21245

CVE-2018-21245 affects Pound up to version 2.8, enabling HTTP request smuggling due to a vulnerability related to CVE-2016-10711. The issue is described across multiple feeds as a Pound HTTP handling flaw that can impact confidentiality and integrity (per NVD CVSS data: high impact on both C and ...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq

This repository is an offensive tool for collecting or writing various vulnerability PoCs proofs of concept and exploits. The primary tool in this repository is a Python script named ActiveMQExP/ActiveMQExPV1.0.py, which is designed to exploit a vulnerability in Apache ActiveMQ, specifically...