mongo-express 代码问题漏洞

mongo-express is a lightweight, web-based management interface for interactively managing MongoDB databases. A security vulnerability exists in all versions of mongo-express that stems from an unhandled exception...

GHSA-VH8F-XW5V-8993 Command Injection in macfromip

All versions of npm package macfromip are affected by a command injection vulnerability. The injection point is located in line 66 in macfromip.js...

PT-2021-15744

Name of the Vulnerable Software and Affected Versions: wpDataTables – Tables & Table Charts premium WordPress plugin versions prior to 3.4.2 Description: The issue allows a low-privilege authenticated user to perform Boolean-based blind SQL Injection on the "/wp-admin/admin-ajax.php?action=get...

CVE-2021-24152

The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting...

CVE-2021-24152

The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting...

CVE-2021-24152

The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting...

CVE-2021-24152

Popup Builder (WordPress plugin) is affected by CVE-2021-24152, a reflected XSS in the All Subscribers setting page. The vulnerability affects versions prior to 3.74, and requires an authenticated attacker to entice a logged-in user to a crafted URL to execute arbitrary scripts in the user’s brow...

PT-2021-15697

Name of the Vulnerable Software and Affected Versions: Popup Builder affected versions not specified Description: The issue concerns a reflected Cross-Site Scripting vulnerability in the "All Subscribers" setting page of Popup Builder. Recommendations: At the moment, there is no information about...

CVE-2021-24152: Improper Neutralization of Input During Web Page Generation

The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting...

PT-2021-18176

Name of the Vulnerable Software and Affected Versions: Mahara version 20.10 Description: The issue allows a remote attacker to remove inbox-mail on the server due to a Cross Site Request Forgery CSRF vulnerability. The application fails to validate the CSRF token for a POST request. An attacker c...

CVE-2020-6785

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This...

CVE-2020-6785: Uncontrolled Search Path Element

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This...

PT-2021-12597

Name of the Vulnerable Software and Affected Versions: Bosch BVMS versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older Bosch BVMS Viewer versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older Bosch DIVAR IP 7000 R2 with BVMS versions prior to 10.1.1 Bosch DIVAR IP all-in-one 5000 with BVMS versions...

GHSA-4RV9-5VC4-88CG Command injection in node-ps

This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js...

GHSA-545Q-3FG6-48M7 html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process...

SnitchDNS - Database Driven DNS Server With A Web UI

SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without restarting any system services. One of its main features is the logging of all DNS queries allowing the discovery o...

mongo-java-driver: client-side field level encryption not verifying KMS host name

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

PT-2021-11116 · Siemens · Logo! 230Rce +7

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions all LOGO! 12/24RCEo versions all LOGO! 230RCE versions all LOGO! 230RCEo versions all LOGO! 24CE versions all LOGO! 24CEo versions all LOGO! 24RCE versions all LOGO! 24RCEo versions all SIPLUS LOGO! 12/24RCE versions a...

CompTIA Security Certification Prep — Lifetime Access for just $30

At long last, top companies are starting to take cybersecurity seriously. As a consequence, technical recruiters are looking for people with hacking skills and certifications to prove it. CompTIA is seen as the gold standard when it comes to cybersecurity exams, with several certifications to...

[SECURITY] Fedora 33 Update: git-2.30.2-1.fc33

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...