CVE-2022-31361

Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-31361

CVE-2022-31361 affects Docebo Community Edition versions 4.0.5 and below, with a SQL injection vulnerability stemming from the product’s code. The issue is reported across multiple feeds (NVD, Red Hat, CNNVD, CVE lists) and is tied to Docebo Community Edition, which is noted as no longer supporte...

CVE-2022-31362

Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-31362

CVE-2022-31362 affects Docebo Community Edition v4.0.5 and earlier. Multiple sources document an arbitrary file upload vulnerability in these unsupported versions; the exact root cause is not detailed in the provided materials. Some advisories (e.g., PT-2022-20717) suggest temporarily restricting...

CVE-2022-31362

Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2022-20716 · Docebo · Docebo Community Edition

Name of the Vulnerable Software and Affected Versions: Docebo Community Edition versions 4.0.5 and below Description: A SQL injection issue was discovered in Docebo Community Edition. This issue only affects products that are no longer supported by the maintainer. Recommendations: For versions...

CVE-2017-20070 Hindu Matrimonial Script communitymanagement.php privileges management

A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of the file /admin/communitymanagement.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the...

Malicious code in community-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88ee67899ec744ae763315d51938fe74eec518bc6e0f550a88743971ecb2d259 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ddg_community_platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2cef0b122b2bbe60dbc548a1742701b973e65a79378f42912a000400d99d38a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ringcentral-community-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7350ee514e74a46e04bbb40a6879da3a2070c7b76b131012941b750514e1a6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

vulhub

This repository is an open-source collection of vulnerable web applications and environments for security research and training. It is maintained by phith0n and hosted on GitHub. The repository contains a variety of vulnerable applications, including web servers, databases, and other systems, to...

Metasploit Weekly Wrap-Up

vCenter Secret Extracter Expanding on the work of the vcenterforgesamltoken auxiliary module, community contributor npm-cesium137-io has added a new module for extracting the vmdir/vmafd certificates, the IdP keypair, the VMCA root cert, and anything from vmafd that has a private key associated,...

Meet Josh Johnson: Senior Enterprise Architect

A love of technology and coding brought Josh Johnson to Akamai. Learn what he thinks a developer-first approach means for the Akamai developer community...

vulhub

This is an open-source vulnerability training platform. It is a collection of vulnerable environments for training and testing purposes, allowing users to practice their penetration testing and vulnerability assessment skills in a safe and controlled environment. The platform is maintained by the...

.NET Core 3.1 Update: June 14, 2022 (KB5015424)

None None...

.NET 6.0 Update: June 14, 2022 (KB5015429)

None None...

CVE-2021-40604

A Server-Side Request Forgery SSRF vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated us...

CVE-2021-40604

A Server-Side Request Forgery SSRF vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated us...

CVE-2021-40604

A Server-Side Request Forgery SSRF vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated us...

Server side request forgery (ssrf)

A Server-Side Request Forgery SSRF vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated us...