396 matches found
Moodle Reflected XSS in mod_data advanced search
Cross-site scripting XSS vulnerability in the advanced-search feature in moddata in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted field in a URL, as...
CVE-2022-21677
CVE-2022-21677 affects Discourse prior to versions 2.7.13 and 2.8.0.beta11, where the group advanced search option could reveal restricted group visibility or members visibility. The root cause is that search did not respect the configured visibility levels. The issue results in information discl...
PT-2022-15029 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.7.13 Discourse versions prior to 2.8.0.beta11 Description: A vulnerability has been discovered in Discourse where the group advanced search option does not respect the group's visibility and members visibility...
Discourse 2.8.x < 2.8.0.beta11 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
WordPress Advanced Search plugin <= 1.1.2 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Advanced Search plugin versions = 1.1.2. Solution Update the WordPress Advanced Search plugin to the latest available version at least 1.1.3...
What is a Google Hacking❓ — Google Hack
What is a Google Hacking❓ — Google Hack Google hacking, also known as Google Dorking, is a data gathering technique used by an aggressor utilizing advanced Google searching procedures. Google hacking search queries can be used to identify security flaws in web applications, gather data for...
New Admin Portal for Akamai Enterprise Application Access
The definition of a user has evolved to comprise much more than an employee, making secure access to the right application, for the right user, at the right time difficult and complex. Akamai Enterprise Application Access EAA is a unique cloud architecture that closes all inbound firewall ports,...
Recon Simplified with Spyse
One of the major struggles in bug bounty hunting is to collect and analyze data during reconnaissance, especially when there are a lot of tools around but very few that offer actually useful results. The job of eliminating false positives and unrelated data from your recon becomes harder as the...
Git-Wild-Hunt - A Tool To Hunt For Credentials In Github Wild AKA Git*Hunt
A tool to hunt for credentials in the GitHub wild AKA githunt Getting started 1. Install the tool 2. Configure your GitHub token 3. Search for credentials 4. See results cat results.json | jq Installation requirements: virtualenv, python3 1. git clone https://github.com/d1vious/git-wild-hunt &&...
GitLab Information Disclosure Vulnerability (CNVD-2021-14192)
GitLab is a product of the U.S. et all are U.S. GitLab company.GitLab is a self-hosted, Git version control system project repository application developed using Ruby on Rails.Git et all are products of Git, a free, open source distributed version control system.Rails et all are products of the...
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...
UBUNTU-CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...
Information disclosure
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...
CVE-2020-26416
GitLab EE Information Disclosure (CVE-2020-26416): The Advanced Search component exposes search terms via Rails logs. Affected: GitLab EE versions 8.4 and later, with specific ranges: >=8.4 to =13.5 to =13.6 to
PT-2020-16421 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.4 through 13.4.6 GitLab EE versions 13.5 through 13.5.4 GitLab EE versions 13.6 through 13.6.1 Description: The issue is related to information disclosure in the Advanced Search component of GitLab EE, starting from versi...
GitLab 信息泄露漏洞
GitLab is a product of the U.S. et all are U.S. GitLab company.GitLab is a self-hosted, Git version control system project repository application developed using Ruby on Rails.Git et all are products of Git, a free, open source distributed version control system.Rails et all are products of the...
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...