Sandbox Breakout / Arbitrary Code Execution in pitboss-ng

All versions of pitboss-ng are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor . This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

[ASA-202009-4] python-django: multiple issues

Arch Linux Security Advisory ASA-202009-4 ========================================= Severity: Medium Date : 2020-09-03 CVE-ID : CVE-2020-24583 CVE-2020-24584 Package : python-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1217 Summary ======= The package...

CVE-2020-24312

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fmbackups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken...

PT-2020-14936 · Cellopoint · Cellopoint Cellos

Name of the Vulnerable Software and Affected Versions: Cellopoint Cellos version 4.1.10 Build 20190922 Description: The issue allows unauthorized users to launch a Path Traversal attack due to improper validation of URL input, enabling access to arbitrary files on the system. Recommendations: For...

Medium: gnome-shell

Issue Overview: It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions. CVE-2019-3820 Affected...

Code injection

Philips SureSigns VS4, A.07.107 and prior. The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

PT-2020-14834 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Recommendations: For Philips SureSigns VS4 versions A.07.107 and prior,...

PT-2020-6462

Name of the Vulnerable Software and Affected Versions QEMU version 5.0.0 Description The issue is related to a buffer over-read in the QEMU hardware emulation, specifically in the hw/usb/hcd-ohci.c file. This can allow an attacker to access confidential data, compromise data integrity, and cause ...

PT-2020-5170 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755 Description: The issue allows a business user to access the list of users in the given system using value help, leading to Information Disclosure. It is...

PT-2020-6685 · Fuel Cms · Fuel Cms

Name of the Vulnerable Software and Affected Versions: FUEL CMS version 1.4.7 Description: The issue is related to a lack of protection in the SQL query structure, allowing for SQL injection. This can be exploited via the col parameter in API endpoints such as "/pages/items", "/permissions/items"...

PT-2020-5453 · Mysql Server +8 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.50 and prior MySQL Server versions 5.7.32 and prior MySQL Server versions 8.0.22 and prior Description: The issue is related to the InnoDB component of MySQL Server and is caused by errors in resource release. It...

PT-2020-6647 · Videolan +3 · Vlc Media Player +3

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 3.0.11 Description: A buffer overflow vulnerability in the Parse indx component of VideoLAN VLC Media Player allows attackers to cause an out-of-bounds read via a crafted .avi file. This vulnerability is...

PT-2020-14787 · Springblade · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions prior to 2.7.2 Description: The issue concerns SQL Injection in the ORDER BY clause, related to the /api/blade-log/api/list endpoint, specifically the ascs and desc parameters. Recommendations: For versions prior to 2.7.2...

PT-2020-20025 · Google +1 · Google Totp +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1RB Description: An issue exists where improper authentication allows an attacker with a user's primary credentials to bypass Google TOTP authentication. Recommendations: For versions prior to 9.1RB,...

CVE-2020-11934

CVE-2020-11934 concerns snapd’s snapctl user-open path where OpenURL() manipulates the XDG_DATA_DIRS environment variable, allowing a malicious snap to influence how host xdg-open opens URLs and potentially run a script within the snap with confinement bypass. The issue did not affect Ubuntu Core...

OPENSUSE-SU-2020:1101-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. This update was imported from the openSUSE:Leap:15.2:Update update project...

[SECURITY] [DSA 4734-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4734-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2020 https://www.debian.org/security/faq -...

OPENSUSE-SU-2020:1055-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. This update was imported from the openSUSE:Leap:15.1:Update update project...

lemlist: app.lemlist.com : Admin Panel Access

hi team, Steps To Reproduce: While doing some analyse for javascript files in app.lemlist.com i found interesting endpoints . is the admin panal and is not protected , any normal user can access the panel . Steps To Reproduce: Add details for how we can reproduce the issue 1. Log into your accoun...

openSUSE Security Update : pdns-recursor (openSUSE-2020-1005)

This update for pdns-recursor fixes the following issues : - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...