1491 matches found
PT-2022-12162
Name of the Vulnerable Software and Affected Versions RosarioSIS versions prior to 7.6.1 Description A Cross Site Scripting XSS issue exists, allowing remote malicious users to inject arbitrary JavaScript or HTML via the xss clean function in classes/Security.php. Affected components include all...
net.mingsoft:ms-ad (1.0.0), net.mingsoft:ms-clean (>=1.0.0, <=1.0.1) +16 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.20)
net.mingsoft:ms-basic MAVEN version 1.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-ad 1.0.0 - net.mingsoft:ms-clean =1.0.0, =1.0.2, =1.0.1, =1.0.8, =1.0.9 - net.mingsoft:ms-msso-clien...
net.mingsoft:ms-ad (1.0.0), net.mingsoft:ms-clean (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (>=1.0.5, <=2.1.15)
net.mingsoft:ms-basic MAVEN version =1.0.5, =1.0.0, =1.0.4, =1.0.0, =4.6.3-snapshots, =1.0.0, =1.0.4, =1.0.0, =1.0.1, =1.0.1, =1.0.2 and more Source cves: CVE-2021-46062 Source advisory: MEND:CVE-2021-46062...
PT-2022-36817
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash occurs in the UA ServerConfig clean function, specifically in the fuzz binary message.cc...
RUSTSEC-2022-0003 Space bug in `clean_text`
An incorrect mapping from HTML specification to ASCII codes was used. Because HTML treats the Form Feed as whitespace, code like this has an injection bug: let html = format!"", cleantextusersuppliedstring; Applications are not affected if they quote their attributes, or if they don't use cleante...
Connector Install Failed - A clean install of the new Citrix Cloud Connector is required
Error during Connector install/setup: A clean install of the new Citrix Cloud Connector is required...
CVE-2021-21896
A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to arbitrary file deletion. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21891
A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch deletefile. An attacker can make an...
Meet the new project experience for SonarCloud
We are very pleased to announce that we have released a new project experience. It’s now available in SonarCloud for all users. You’ll notice a few improvements the next time you open SonarCloud. We’re going to tell you more about what this makeover is about in this article. You may be wondering...
OPENSUSE-SU-2021:1370-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...
PT-2021-21204 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 Description: The issue concerns an arbitrary file deletion vulnerability that can be exploited using the Windows feature of NTFS called Symbolic links...
EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2021-2539)
According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safeattrsonly and forms argument...
clean-headlights.com Cross Site Scripting vulnerability OBB-2147220
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Learn How Akamai Enables AI Powered Analytics Tools to Reduce Water Losses
The Accelerator Program, a flagship initiative of Akamai India’s Corporate Social Responsibility Trust, enables early-stage innovations for water conservation. Over the past two years, along with our mentoring partner, the International Center for Clean Water ICCW; an initiative of the Indian...
Inefficient Regular Expression Complexity in clean-css/clean-css
✍️ Description It allows cause a denial of service when calling function isDataUriResource. 🕵️♂️ Proof of Concept // PoC.js var isDataUriResource = require"clean-css/lib/utils/is-data-uri-resource" forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = 'data:' +...
SUSE Linux Enterprise Server clone-master-clean-up.sh File Deletion
The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system is related to errors in link handling. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...
Git LFS Clone Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Git LFS Clone Command Exec', 'Description' = %q Git clients that support delay-capable clean / smudge filters and symbolic links on...
Process-Dump - Windows Tool For Dumping Malware PE Files From Memory Back To Disk For Analysis
Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often unpack or inject...
CVE-2021-39268
Persistent cross-site scripting XSS in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via malicious SVG files. This occurs because the cleanfileoutput protection mechanism can be bypassed...
WordPress Clean Login plugin <= 1.12.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Clean Login plugin versions = 1.12.6.3. Solution Update the WordPress Clean Login plugin to the latest available version at least 1.12.6.4...