GitLab Community Edition and Enterprise Edition HTML Injection Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. An HTML injection...

Microsoft Visual Studio Community installer untrustworthy search path vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle.Visual Studio Community is the community edition of Visual Studio.The installer is the Visual...

CVE-2018-1000550

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This...

Directory traversal

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This...

CVE-2018-1000550

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This...

CVE-2018-1000550

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This...

CVE-2018-0596

Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0596

CVE-2018-0596 describes an untrusted search path vulnerability in the Microsoft Visual Studio Community installer , enabling an attacker to execute arbitrary code with the caller’s privileges via a Trojan DLL placed in the installer’s directory. Root cause: DLL search path / App Dir DLL planting ...

Burp Suite Community Edition Detection (Linux/Unix SSH Login)

Detects the installed version of Burp Suite Community Edition. The script logs in via ssh, searches for executable SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

communitycreditunion.com XSS vulnerability

Open Bug Bounty ID: OBB-634045 Description| Value ---|--- Affected Website:| communitycreditunion.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Windows

Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Linux

Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Burp Suite Community Edition Detection (Windows SMB Login)

Detects the installed version of Burp Suite Community Edition on Windows. The script logs in via smb, searches for Burp Suite Community Edition in the registry and gets the version from registry. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

Burp Suite Community Edition Detection (Mac OS X SSH Login)

Detects the installed version of Burp Suite Community Edition on Mac OS X. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Mac OS X

Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-1153

Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic...

CVE-2018-1153

Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic...

CVE-2018-1153

Burp Suite Community Edition 1.7.32–1.7.33 has a server TLS certificate validation flaw in some HTTPS requests, enabling a network MITM to modify or view traffic. This is tracked as CVE-2018-1153 (NVD shows CVSSv3 7.4 HIGH / CVSSv2 5.8 MEDIUM; attack vector NETWORK; high impact to confidentiality...

Security Bulletin: IBM Security Access Manager is affected by a redirect vulnerability (CVE-2017-1489)

Summary IBM Security Access Manager has addressed a possible redirect vulnerability in IBM Security Access Manager e-community configurations. Vulnerability Details CVEID: CVE-2017-1489 DESCRIPTION: IBM Security Access Manager e-community configurations may be affected by a redirect vulnerability...

Security Bulletin: Multiple Security vulnerabilities have been identified in IBM Java SDK shipped with WebSphere Application Server Community Edition

Summary IBM Java SDK is shipped as a component of WebSphere Application Server Community Edition 3.0.0.4. Information about multiple security vulnerabilities affecting IBM Java SDK have been published in a security bulletin. Vulnerability Details Please consult the security bulletin Multiple...