37 matches found
CVE-2019-5955
creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:36+00:00| seen| https://t.me/cvemitreorg/45...
Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2016-5955)
Summary Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVE ID: CVE-2016-5955 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to an undisclosed cross-site scripting attack. This vulnerability...
GitStack - Unsanitized Argument Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GitStack Unsanitized Argument RCE', 'Description' = %q This module exploits a remote code execution vulnerability that exists in GitStack through...
GitStack Unauthenticated REST API Requests
This modules exploits unauthenticated REST API requests in GitStack through v2.3.10. The module supports requests for listing users of the application and listing available repositories. Additionally, the module can create a user and add the user to the application's repositories. This module has...
CVE-2018-5955
GitStack (through v2.3.10) is affected by CVE-2018-5955 due to insufficient input filtering in the rest/user/ URI, allowing an unauthenticated attacker to add a user to the server. Public details include a verified PoC and Metasploit modules (e.g., Exploit-DB 44356; Metasploit auxiliary/exploit m...
GitStack - Remote Code Execution
GitStack - Remote Code Execution Vulnerability Summary The following advisory describes an unauthenticated action that allows a remote attacker to add a user to GitStack and then used to trigger an unauthenticated remote code execution. GitStack is “a software that lets you setup your own private...
GitStack - Remote Code Execution
Vulnerability Summary The following advisory describes an unauthenticated action that allows a remote attacker to add a user to GitStack and then used to trigger an unauthenticated remote code execution. GitStack is “a software that lets you setup your own private Git server for Windows. This mea...
CVE-2015-5955
CVE-2015-5955 affects the ownCloud iOS app prior to version 3.4.4. The vulnerability arises from improper handling of state when switching between multiple configured ownCloud instances, which may cause the app to continue sending previous authentication headers and leak credentials and cookies t...
CVE-2014-5955
The CVE describes a flaw in the Atomic Fusion (com.bytesized.fusion) Android app v1.7 where SSL X.509 certificate verification is not performed, enabling MITM via a crafted certificate to disclose sensitive data. NVD reports a Medium impact (base score 5.4). Exploitation details and a concrete re...
CVE-2013-5955
CVE-2013-5955 describes an XSS vulnerability in Joomla! PBBooking component (com_pbbooking) 2.4, triggered in manage.php via an arbitrary parameter in the edit action sent to administrator/index.php. Root cause is improper input filtering, allowing remote attackers to inject arbitrary script or H...
CVE-2012-5955
Technical details about CVE-2012-5955 are not publicly provided in the connected documents. Monitor for updates from IBM/NVD and vendors for affected versions, impact, and remediation.
CVE-2008-5955
CVE-2008-5955 affects Wbstreet (aka PHPSTREET Webboard) 1.0. The vulnerability is an SQL injection in show.php via the id parameter, allowing remote attackers to craft SQL commands. This is the stated root cause: unsanitized input in the id parameter leading to arbitrary SQL execution. Public ref...
CVE-2008-5955
SQL injection vulnerability in show.php in Wbstreet aka PHPSTREET Webboard 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5955
creationtimestamp| type| source ---|---|--- 2008-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32642 2008-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7337...
CVE-2007-5955
CVE-2007-5955 describes a cross-site scripting (XSS) vulnerability in UPDIR.NET’s updir.php prior to version 2.04, affecting the full‑text search and file upload functions. The JVN entry notes that updir.php allows uploading and publishing files and that an attacker could execute arbitrary script...
CVE-2006-5955
Affected software: 20/20 DataShed (Real Estate Listing System). Vulnerable component: listings.asp (CVE-2006-5955) with vulnerability exposed via the itemID parameter, enabling SQL commands to be executed remotely. Related entry CVE-2006-6067 documents additional vectors (itemID to f-email.asp an...
