195 matches found
RHEL 8 : libpq (RHSA-2020:5638)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5638 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. The following...
CVE-2020-5638
Cross-site scripting vulnerability in desknet's NEO desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...
CVE-2020-5638
CVE-2020-5638 affects desknet’s NEO (Small License V5.5 R1.5 and earlier; Enterprise License V5.5 R1.5 and earlier). The issue is a stored cross-site scripting (CWE-79) that allows an attacker to execute arbitrary scripts in a logged-in user’s browser via unspecified vectors. The root cause, per ...
Selligent Message Studio Struts Code Execution (CVE-2017-5638)
Binary data selligentmessagestudiorce.nbin...
handymantravels.co.in Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1206455 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Huawei Data Communication: Apache Struts2 RCE Vulnerability in Huawei Products (huawei-sa-20170316-01-struts2)
Apache Struts2 released a remote code execution RCE vulnerability in S2-045 on the official website. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
tableau-13-369-d04-vip.ucl.ac.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149143 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting tableau-13-369-d04-vip.ucl.ac.uk website and its...
f3c.cfdt.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1067369 Security Researcher Track2 Helped patch 214 vulnerabilities Received 2 Coordinated Disclosure badges Received 1 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting f3c.cfdt.fr website and its...
CVE-2013-5638
Transcend WiFiSD 1.8 has persistent XSS...
CVE-2013-5638
Transcend WiFiSD 1.8 has persistent XSS...
CVE-2013-5638
Transcend WiFiSD 1.8 has persistent XSS...
CVE-2013-5638
The CVE-2013-5638 entry concerns Transcend WiFiSD 1.8, where a persistent cross-site scripting (XSS) vulnerability exists in the web application. The root cause is described as lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code. ...
davidfryling.org Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3712 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting davidfryling.org website and its users. Following...
navigates.gates.com Cross Site Scripting vulnerability
Security Researcher KhanJanny Helped patch 2643 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting navigates.gates.com website and its users. Following...
CVE-2019-5638
Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user...
CVE-2019-5638 Rapid7 Nexpose Insufficient Session Management
Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user...
CVE-2019-5638
Summary: CVE-2019-5638 relates to Rapid7 Nexpose/InsightVM where an administrator’s security edits (e.g., password changes) do not terminate existing sessions, allowing a previously compromised user to remain logged in. Affected versions (per sources): Nexpose 6.5.50 and prior; InsightVM/Nexpose ...
Symlink Attack
Red Hat Storage is a software only, scale-out storage solution that provides flexible and agile unstructured data storage for the enterprise. A flaw was found in the way the Swift component used Python pickle. This could lead to arbitrary code execution. With this update, the JSON JavaScript Obje...
Apache Struts OGNL injection vulnerability principle with an example-vulnerability warning-the black bar safety net
Through this article, we mainly learn how Apache Struts to achieve OGNL injection. Our examples will be set forth in the Struts of the two critical vulnerabilities: CVE-2017-5638（Equifax information disclosure and CVE-2018-11776。 Apache Struts is a free open source framework for creating modern...
Mirai, Gafgyt Botnets Return to Target Infamous Apache Struts, SonicWall Flaws
Researchers have discovered new variants for the infamous Mirai and Gafgyt IoT botnets – now targeting well-known vulnerabilities in Apache Struts and SonicWall. The new Mirai strain targets the Apache Struts flaw associated with the 2017 Equifax breach, while the Gafgyt variant uses a...