CVE-2021-21269 Path Traversal in Keymaker

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...

CVE-2021-21269

CVE-2021-21269 affects Keymaker (a Mastodon Community Finder based Matrix serverlist page). Before v0.2.0, the assets endpoint did not validate the requested extension, and the Rust join call on user input allowed a Path Traversal, enabling reading of files beyond the intended directory. This cou...

SQL Injection Vulnerability in ThinkSaaS Open Source Community Foundation Edition

ThinkSAAS open source community is a lightweight open source community system , is a community system that can be used to build discussion groups , bbs and circles . ThinkSaaS Open Source Community Basic Edition suffers from a SQL injection vulnerability . Attackers can exploit the vulnerability ...

ByteDance-HIDS - A Cloud-Native Host-Based Intrusion Detection Solution Project To Provide Next-Generation Threat Detection And Behavior Audition With Modern Architecture

ByteDance-HIDS is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture. ByteDance-HIDS comprises three major components： ByteDance-HIDS Agent, co-worked with ByteDance-HIDS Driver , is the...

CVE-2021-3162

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation...

CVE-2021-3162

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation...

Privilege escalation

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation...

CVE-2021-3162

Affected software: Docker Desktop Community for macOS prior to 2.5.0.0. Root cause: mishandling of certificate checking in this version. Impact: local privilege escalation. Remediation: upgrade to Docker Desktop Community 2.5.0.0 or newer (per linked release notes). If newer versions are unavaila...

PT-2023-12547 · Odoo +1 · Odoo Community +2

Name of the Vulnerable Software and Affected Versions: Odoo Community versions 13.0 and earlier Odoo Enterprise versions 13.0 and earlier Description: The issue allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the...

PT-2023-12545 · Odoo +1 · Odoo Community +2

Name of the Vulnerable Software and Affected Versions: Odoo Community versions 13.0 and earlier Odoo Enterprise versions 13.0 and earlier Description: The issue is related to improper access control, allowing users with deactivated accounts to access the system using their deactivated account and...

Niushop community group buy suffers from a file upload vulnerability

Niushop Community Group Buying is a group buying system that allows you to quickly set up a community group buying/community program and quickly launch your online and offline business. A file upload vulnerability exists in Niushop Community Group Buying, which can be exploited by an attacker to...

SQL Injection Vulnerability in Heybbs us***.php File

Heybbs is a front-end based on bootstrap + js + css, back-end php + mysql development of community programs. A SQL injection vulnerability exists in the Heybbs us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Unspecified Vulnerability in Gitlab Community Edition

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in Gitlab Community Editi...

SQL Injection Vulnerability in Heybbs se***.php File

Heybbs is a front-end based on bootstrap + js + css, back-end php + mysql development of community programs. A SQL injection vulnerability exists in the Heybbs se.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2021-3025

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API the sortDir parameter in a sortBy=popular action to the GETindex method in applications/downloads/api/files.php...

CVE-2021-3025

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API the sortDir parameter in a sortBy=popular action to the GETindex method in applications/downloads/api/files.php...

Sql injection

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API the sortDir parameter in a sortBy=popular action to the GETindex method in applications/downloads/api/files.php...

CVE-2021-3025

Summary: CVE-2021-3025 affects Invision Community IPS Community Suite up to version 4.5.4.2. The vulnerability is an SQL Injection in the Downloads REST API, triggered by the sortDir parameter via sortBy=popular in the GETindex() method of /applications/downloads/api/files.php. The issue could al...

CVE-2021-3025

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API the sortDir parameter in a sortBy=popular action to the GETindex method in applications/downloads/api/files.php...

Building a Cross Team Culture

At Akamai, we all contribute to our diverse, inclusive, and engaged culture. One in which we each have a voice and are empowered to have a meaningful impact on our business and its direction. It's by fostering this culture across teams that we're able to achieve the company's guiding principles...