What Does Fishing for Rebar Have to Do with Building a More Sustainable Internet?

Danny Lewin Community Care Days DLCCDs are a celebration of our late co-founder Danny Lewin’s generous spirit and his tenacious appetites for collaboration, innovation, and especially giving back to our global community. DLCCDs bring to life our values and empower all Akamai employees to voluntee...

Hasura GraphQL 2.2.0 - Information Disclosure Exploit

Exploit Title: Hasura GraphQL 2.2.0 - Information Disclosure Software: Hasura GraphQL Community Software Link: https://github.com/hasura/graphql-engine Version: 2.2.0 Exploit Author: Dolev Farhi Tested on: Ubuntu import requests SERVERADDR = 'x.x.x.x' url = 'http:///v1/metadata'.formatSERVERADDR...

Hasura GraphQL 2.2.0 Information Disclosure

Exploit Title: Hasura GraphQL 2.2.0 - Information Disclosure Software: Hasura GraphQL Community Software Link: https://github.com/hasura/graphql-engine Version: 2.2.0 Exploit Author: Dolev Farhi Date: 5/05/2022 Tested on: Ubuntu import requests SERVERADDR = 'x.x.x.x' url =...

Hasura GraphQL 2.2.0 - Information Disclosure

Exploit Title: Hasura GraphQL 2.2.0 - Information Disclosure Software: Hasura GraphQL Community Software Link: https://github.com/hasura/graphql-engine Version: 2.2.0 Exploit Author: Dolev Farhi Date: 5/05/2022 Tested on: Ubuntu import requests SERVERADDR = 'x.x.x.x' url =...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2...

CVE-2020-18327

Cross Site Scripting XSS vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2...

CVE-2020-18327

Alfresco Community Edition XSS (CVE-2020-18327) affects Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. The underlying issue is a cross-site scripting vulnerability that can be exploited through this endpoint. It is fixed in v6.2. Affected...

Alfresco Community Edition 跨站脚本漏洞

Alfresco Software Alfresco Community Edition is the United States Alfresco Software, Inc. of a set of open source enterprise content management system community edition. The system includes document management, office collaboration and other features. A security vulnerability exists in Alfresco...

PT-2022-8593 · Alfresco · Alfresco Community Edition

Name of the Vulnerable Software and Affected Versions: Alfresco Community Edition versions 5.2.0 through 6.1 Description: A Cross Site Scripting XSS issue exists via the action parameter in the "alfresco/s/admin/admin-nodebrowser" API endpoint. This allows for potential exploitation. The issue is...

Microweber Email Bombing Vulnerability

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An email bombing vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from a failure to ra...

GitLab Enterprise Edition 输入验证错误漏洞

GitLab Enterprise Edition is a content management system. An input validation error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that stems from improper input validation. A remote administrator can steal environment variables via a specially designed email...

GitLab Enterprise Edition和GitLab Community Edition 授权问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. GitLab Enterprise Edition and GitLab Community Edition have an authorization issue vulnerability that arises from an application exporting too much data in the...

GitLab Enterprise Edition 和 GitLab Community Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An information disclosure vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that could allow a remote administrator to gain...

GitLab Enterprise Edition 和 GitLab Community Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An Access Control Error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that stems from inaccurately displaying Snippet files th...

GitLab Enterprise Edition和GitLab Community Edition 资源管理错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A resource management error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which arises from user-supplied input in user...

GitLab Enterprise Edition 和 GitLab Community Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An access control error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which stems from improperly restricted access. A remote...

PT-2022-2255

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.10 through 14.6.4 GitLab CE/EE versions 14.7 through 14.7.3 GitLab CE/EE versions 14.8 through 14.8.1 Description An issue has been discovered in GitLab CE/EE, allowing an unauthorized user to steal runner registration...

Qlik Community 信息泄露漏洞

Qlik Community is a data analytics solution. Qlik Community suffers from an information disclosure vulnerability that originates from allowing a remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authenticated requests to an affected system...

vulhub

This repository is an open-source project for vulnerability research and training, maintained by phith0n. It contains a collection of vulnerable environments and tools for testing and learning about various security vulnerabilities. The repository is hosted on GitHub and has a community-driven...

GHSA-7P79-6X2V-5H88 Server crash if running Python 3.10 w/ Sanic 20.12

!!! ONLY APPLIES TO VERSIONS PRIOR TO Sanic v20.12 WHEN USING Python 3.10 !!! Sanic v20.12 officially supports Python versions 3.6, 3.7, 3.8, and 3.9. However, if you accidentally run it with version 3.10 which is not supported by Sanic 20.12, your server is prone to crashing on an incoming web...