79 matches found
CVE-2019-10780
BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...
CVE-2019-10780
CVE-2019-10780 affects BibTeX-Ruby prior to 5.1.0. The vulnerability arises when untrusted input is passed directly to the built-in Ruby Kernel.open via BibTeX.open, enabling OS command injection. Multiple sources (Red Hat, GitHub advisories, OSV/Veracode, NVD) corroborate the issue and its descr...
Command Injection
Overview bibtex-ruby is a BibTeX library, parser, and converter for Ruby. Affected versions of this package are vulnerable to Command Injection due to unsanitized user input being passed directly to the built-in dangerous Ruby Kernel.open method through BibTeX.open. PoC by Snyk: require ‘bibtex’...
Multiple vulnerabilities in BibTex Publications (si_bibtex)
It has been discovered that the extension "BibTex Publications" sibibtex is susceptible to Cross-Site Scripting and SQL Injection. Release Date: December 15, 2014 Bulletin Update: January 9, 2015 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3 default...
Joomla Component BibTeX <= 1.3 - Remote Blind SQL Injection Exploit
No description provided by source. html head titleJoomla Component BibTeX = 1.3 Remote Blind SQL Injection Vulnerability/title /head body !-- Title : Joomla Component BibTeX = 1.3 Remote Blind SQL Injection Vulnerability -- !-- Author : ajann -- !-- Contact : : -- !-- S.Page :...
CVE-2014-3758
Cross-site scripting XSS vulnerability in the BibTex Publications sibibtex extension 0.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via vectors related to the import functionality...
CVE-2014-3759
Multiple SQL injection vulnerabilities in the BibTex Publications sibibtex extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to the 1 search or 2 list functionality...
Cross site scripting
Cross-site scripting XSS vulnerability in the BibTex Publications sibibtex extension 0.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via vectors related to the import functionality...
Sql injection
Multiple SQL injection vulnerabilities in the BibTex Publications sibibtex extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to the 1 search or 2 list functionality...
CVE-2014-3759
Multiple SQL injection vulnerabilities in the BibTex Publications sibibtex extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to the 1 search or 2 list functionality...
CVE-2014-3758
The CVE refers to a Cross-Site Scripting (XSS) vulnerability in the TYPO3 extension BibTex Publications (si_bibtex) version 0.2.3, exposed through the import functionality. The TYPO3 security bulletin TYPO3-EXT-SA-2014-020 documents affected versions (0.2.3 and below) and lists XSS (alongside SQL...
CVE-2014-3759
CVE-2014-3759 refers to multiple SQL injection vulnerabilities in the TYPO3 extension BibTex Publications (si_bibtex) version 0.2.3. The root issue is improper handling/escaping of user input in the extension’s search and list functionality, allowing remote attackers to execute arbitrary SQL comm...
BibTeX - .bib File Handling Memory Corruption
BibTeX - .bib File Handling Memory Corruption Bugtraq ID: 34332 Class: Failure to Handle Exceptional Conditions Published: Apr 01 2009 12:00AM Updated: Nov 13 2009 03:46PM Credit: Vincent Lafevre Vulnerable: RedHat Linux 2.1 RedHat Fedora 9 0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise...
BibTeX '.bib' File Handling Memory Corruption Vulnerability
No description provided by source. Bugtraq ID: 34332 Class: Failure to Handle Exceptional Conditions Published: Apr 01 2009 12:00AM Updated: Nov 13 2009 03:46PM Credit: Vincent Lafevre Vulnerable: RedHat Linux 2.1 RedHat Fedora 9 0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 5...
BibTeX - '.bib' File Handling Memory Corruption
Bugtraq ID: 34332 Class: Failure to Handle Exceptional Conditions Published: Apr 01 2009 12:00AM Updated: Nov 13 2009 03:46PM Credit: Vincent Lafevre Vulnerable: RedHat Linux 2.1 RedHat Fedora 9 0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 5 RedHat Enterprise Linux WS 4 RedHat...
BibTeX '.bib' File Handling Memory Corruption Vulnerability
Exploit for unknown platform in category dos / poc =========================================================== BibTeX '.bib' File Handling Memory Corruption Vulnerability =========================================================== Title: BibTeX '.bib' File Handling Memory Corruption Vulnerability...
CVE-2009-1284
Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...
CVE-2009-1284
Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...