ca.ibodrov.concord:testcontainers-concord (>=0.0.2 <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21 <=0.0.41) +245 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (>=2.0.0 <=9.1.2)

com.cronutils:cron-utils MAVEN version =2.0.0, =0.0.2, =0.0.21, =0.0.1, =1.0.30 - com.baomidou:jobs-spring-boot-starter =1.0.3 - com.cronutils:cron-utils-spring =1.0.1 - com.elastisys:autoscaler.core =5.2.2 - com.elastisys:autoscaler.distro.standard =5.2.2 -...

Template injection in cron-utils

Impact A Template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron...

GHSA-PFJ3-56HM-JWQ5 Template injection in cron-utils

Impact A Template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron...

Cron Utils Injection Vulnerability

Cron Utils is a Java codebase for authenticating, parsing, and migrating Cron expressions from the individual developers at Jmrozanec. An injection vulnerability exists in Cron-utils versions prior to 9.1.3, which can be exploited by an attacker to be able to inject arbitrary Java EL expressions,...

JSMon - JavaScript Change Monitor for BugBounty

Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will be notified via Telegram with a message containing a li...

libselinux bug fix and enhancement update

The libselinux packages contain the core library of an SELinux system. The libselinux library provides an API for SELinux applications to get and set process and file security contexts, and to obtain security policy decisions. It is required for any applications that use the SELinux API, and is...

Prey 1.9.6 Unquoted Service Path

Exploit Title: Prey 1.9.6 - "CronService" Unquoted Service Path Discovery by: Ömer Tuygun Discovery Date:16.10.2020 Vendor Homepage: https://preyproject.com/ Software Link: https://preyproject.com/download/ Tested Version: 1.9.6 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 10 P...

cPanel cross-site scripting vulnerability (CNVD-2020-55180)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 90.0.10, which stems from allowing SELF XSS via the Cron...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-55179)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 90.0.10, which stems from allowing SELF XSS via the Cron...

ismartgate PRO File Upload Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO version 1.5.9, which can be exploited by attackers to conduct privilege escalation attacks by appending PHP code to /cron/mailAdmin.php...

ismartgate PRO /cron/mailAdmin.php Elevation of Privilege Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO /cron/mailAdmin.php that allows remote attackers to exploit the vulnerability to submit special requests that can elevate privileges...

CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26114

CVE-2020-26114 (cPanel before 90.0.10) is documented as a self XSS vulnerability in the Cron Jobs interface (SEC-573). The vulnerability affects cPanel’s web-based admin UI, enabling self-derived XSS via cron job input handling. Multiple connected sources consistently describe the same issue; no ...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26115

CVE-2020-26115 affects cPanel prior to 90.0.10. The issue is a self XSS via the Cron Editor interface (SEC-574). Affected product: cPanel web-based platform; vulnerability originates from improper handling in the Cron Editor, enabling a user-supplied payload to execute in the context of the admin...