CVE-2024-28849

Summary: CVE-2024-28849 affects the follow-redirects library (Node.js) used as a drop-in replacement for Node's http/https. The issue is that on cross-domain redirects, the authorization header is cleared but the proxy-authentication header, which may contain credentials, is not cleared, risking ...

CVE-2024-28849

creationtimestamp| type| source ---|---|--- 2024-03-14 16:38:54+00:00| published-proof-of-concept| https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp 2024-03-14 18:22:47+00:00| seen| https://t.me/ctinow/208012 2024-03-14 18:27:02+00:00| seen|...

CVE-2020-28849

creationtimestamp| type| source ---|---|--- 2023-08-11 18:16:57+00:00| seen| https://t.me/cibsecurity/68354...

CVE-2020-28849

Cross Site Scripting XSS vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module...

CVE-2020-28849

ChurchCRM 4.2.1 is affected by a Cross-Site Scripting (XSS) vulnerability in the Add New Deposit field of the View All Deposit module. The flaw arises from insufficient input filtering/escaping of user-supplied data, enabling remote attackers to inject arbitrary script or HTML. Multiple connected...

CVE-2022-28849

creationtimestamp| type| source ---|---|--- 2022-06-16 00:19:38+00:00| seen| https://t.me/cibsecurity/44565...

Adobe Bridge Multiple Vulnerabilities (APSB22-25) - Mac OS X

The host is missing an important security update according to Adobe June update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-28849

Adobe Bridge 12.x versions (12.0.1 and earlier) are affected by a Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The issue is addressed in APSB22-25 with a secur...

Adobe Bridge 12.x < 12.0.2 Multiple Vulnerabilities (APSB22-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 12.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-25 advisory. - Adobe Bridge version 12.0.1 and earlier versions is affected by a Use-After-Free vulnerability that coul...