CVE-2018-8801

CVE-2018-8801 affects GitLab Community and Enterprise Editions from 8.3 up to 10.x before 10.3, with a Server-Side Request Forgery (SSRF) vulnerability in the Services and webhooks component. The root cause is SSRF in that component, enabling an attacker to trigger requests from the GitLab server...

FreeBSD : Gitlab -- multiple vulnerabilities (dc0c201c-31da-11e8-ac53-d8cb8abf62dd)

GitLab reports : SSRF in services and web hooks There were multiple server-side request forgery issues in the Services feature. An attacker could make requests to servers within the same network of the GitLab instance. This could lead to information disclosure, authentication bypass, or potential...

CVE-2018-8801

creationtimestamp| type| source ---|---|--- 2018-03-24 19:14:03+00:00| seen| https://t.me/itsecalert/102...

Trend Micro OfficeScan Multiple Privilege Escalation and Cross Site Scripting Vulnerabilities

Trend Micro OfficeScan is prone to a privilege escalation vulnerability and multiple cross-site scripting vulnerabilities SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2016-8801

Huawei OceanStor 5600 V3 with V300R003C00C10 and earlier versions allows attackers with administrator privilege to inject a command into a specific command's parameters, and run this injected command with root privilege...

CVE-2016-8801

Huawei OceanStor 5600 V3 (V300R003C00C10 and earlier) is affected by CVE-2016-8801, a command-injection vulnerability arising from input-validation weaknesses in specific command parameter handling. An attacker with administrator privileges can inject and execute commands with root privileges, le...

CVE-2015-8801

CVE-2015-8801 concerns Symantec Endpoint Protection (SEP) client, where a race condition in the device control can allow a local user to bypass USB-file-transfer restrictions before the SEP device manager recognizes a new USB device. The vulnerability affects SEP 12.1 prior to RU6 MP5 and is cite...

Symantec Endpoint Protection Multiple Security Issues

SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security vulnerabilities potentially resulting in a user being able to leverage elevated privilege or access to unauthorized files on the management console. Additionally, a race condition in the device control of a SEP clien...

CVE-2014-8801

CVE-2014-8801 affects the WordPress Paid Memberships Pro plugin. A directory traversal flaw in services/getfile.php (via .. in the QUERY_STRING) allows reading arbitrary files when targeting wp-admin/admin-ajax.php, before version 1.7.15. Public PoCs show accessing wp-config.php. Remediation: upd...

WordPress Plugin Paid Memberships Pro 1.7.14.2 - Directory Traversal

WordPress Plugin Paid Memberships Pro 1.7.14.2 - Directory Traversal Exploit Title: Paid Memberships Pro 1.7.14.2 Path Traversal Date: 14-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/paid-memberships-pro.1.7.14.2.zip...

CVE-2014-8801

creationtimestamp| type| source ---|---|--- 2014-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35303...

WordPress Plugin Paid Memberships Pro 1.7.14.2 - Directory Traversal

Exploit Title: Paid Memberships Pro 1.7.14.2 Path Traversal Date: 14-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/paid-memberships-pro.1.7.14.2.zip Category: webapps CVE: CVE-2014-8801 1. Description getfile.php is...

Fedora Update for cups FEDORA-2008-8801

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-8801 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...