CVE-2021-45791

CVE-2021-45791 affects Slims8 Akasia 8.3.1. A SQL injection exists in multiple admin modules (bibliography, member_type, user_group, membership index) via the dir parameter, due to insufficient input escaping/validation. Exploitation is described as feasible by remotely authenticated librarian us...

Slims8 Akasia SQL注入漏洞

Slims8 Akasia is a software of the Slims community in Indonesia. It is used for library resource management e.g. books, journals, digital documents and other library materials and administration.An SQL injection vulnerability exists in Slims8 Akasia version 8.3.1, which stems from missing SQL...

Fedora: Security Advisory for pandoc-citeproc (FEDORA-2020-1eaffe0013)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: pandoc-citeproc-0.15.0.1-2.fc31

The pandoc-citeproc library supports automatic generation of citations and a bibliography in pandoc documents using the Citation Style Language CSL ma cro language. More details on CSL can be found at . In addition to a library, the package includes an executable, pandoc-citepr oc, which works as...

[SECURITY] Fedora 32 Update: pandoc-citeproc-0.16.2-2.fc32

The pandoc-citeproc library supports automatic generation of citations and a bibliography in pandoc documents using the Citation Style Language CSL ma cro language. More details on CSL can be found at . In addition to a library, the package includes an executable, pandoc-citepr oc, which works as...

[SECURITY] Fedora 33 Update: pandoc-citeproc-0.17.0.1-3.fc33

The pandoc-citeproc library supports automatic generation of citations and a bibliography in pandoc documents using the Citation Style Language CSL ma cro language. More details on CSL can be found at . In addition to a library, the package includes an executable, pandoc-citepr oc, which works as...

[SECURITY] Fedora 28 Update: ghc-hs-bibutils-6.6.0.0-1.fc28

Haskell bindings to Chris Putnam's bibutils, a library that converts between various bibliography formats using a common MODS-format XML intermediate...

[SECURITY] Fedora 27 Update: bibutils-6.6-1.fc27

The bibutils package converts between various bibliography formats using a common MODS-format XML intermediate...

[SECURITY] Fedora 28 Update: bibutils-6.6-1.fc28

The bibutils package converts between various bibliography formats using a common MODS-format XML intermediate...

SLiMS 8 Akasia Bibliography Module Cross-Site Scripting Vulnerability

SLiMS 8 Akasia is an open source, free library management system.Bibliography module is one of the bibliographic synopsis modules. A cross-site scripting vulnerability exists in the Bibliography module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...

CVE-2018-12654

Reflected Cross-Site Scripting XSS exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI...

Cross site scripting

Reflected Cross-Site Scripting XSS exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI...

CVE-2018-12654

Reflected Cross-Site Scripting XSS exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI...

CVE-2018-12654

The CVE-2018-12654 issue affects SLiMS 8 Akasia Bibliography module ( version 8.3.1 ) with a Reflected XSS in admin/modules/bibliography/index.php?keywords= URI. Connected sources describe the vulnerability as enabling an attacker to exfiltrate an administrator cookie, redirect users to malicious...

CVE-2018-12654

Reflected Cross-Site Scripting XSS exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI...

CVE-2018-12654: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI...

lastdayessay.com XSS vulnerability

Open Bug Bounty ID: OBB-610495 Description| Value ---|--- Affected Website:| lastdayessay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MS-Word Payload Delivery: Macro Creator

Invoke-MacroCreator is a powershell Cmdlet that allows for the creation of an MS-Word document embedding a VBA macro with various payload delivery and execution capabilities. Description Basically the script supports three types of payload that you MUST specify using the -t argument: 1. shellcode...

masig.fsu.edu XSS vulnerability

Open Bug Bounty ID: OBB-282969 Description| Value ---|--- Affected Website:| masig.fsu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Basilic diff.php Command Injection

Basilic, a bibliography server for research laboratories, has a command injection vulnerability. Input to the file parameter of diff.php is not properly sanitized. A remote, unauthenticated attacker could exploit this to execute arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network...