Lucene search
+L

7622 matches found

Kitploit
Kitploit
added 2020/08/23 12:30 p.m.77 views

Intel Owl - Analyze Files, Domains, IPs In Multiple Ways From A Single API At Scale

Do you want to get threatintelligence data about a file, an IP or a domain? Do you want to get this kind of data from multiple sources at the same time using a single API request? You are in the right place! This application is built to scale out and to speed up the retrieval of threat info. It c...

7.3AI score
SaveExploits0References16
Hacker One
Hacker One
added 2020/08/20 9:31 p.m.80 views

Dropcontact: Django should not have debug mode enabled

We were displaying sensitive information...

1.5AI score
SaveExploits0
Hacker One
Hacker One
added 2020/08/20 5:48 p.m.75 views

Dropcontact: Registering with email [ +70 Chars ] Lead to Disclose some informations [Django Debug Mode ]

We were displaying / leaking sytems information in case of app crash...

2AI score
SaveExploits0
Hacker One
Hacker One
added 2020/08/20 4:48 p.m.440 views

Dropcontact: Django DEBUG mode enabled and leaked system information.

We were leaking / showing system information. Django DEBUG mode was enabled and showing some information on some errors.I just follow the errors and finally got some sensitive system information such as configuation ,API keys ,Database users ,System Directories,etc...

3.3AI score
SaveExploits0
Hacker One
Hacker One
added 2020/08/20 12:48 p.m.86 views

Dropcontact: Django debug enabled showing information about system, database, configuration files.

We were displaying sensitive information...

1.8AI score
SaveExploits0
OSV
OSV
added 2020/08/11 9:15 p.m.21 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.4AI score
SaveExploits0References1
OSV
OSV
added 2020/08/11 9:15 p.m.20 views

DEBIAN-CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.3AI score0.00871EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/11 9:15 p.m.39 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.4AI score0.00871EPSS
SaveExploits0References1
PyPA
PyPA
added 2020/08/11 9:15 p.m.11 views

PYSEC-2020-38

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS6.7AI score0.00871EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/08/11 9:15 p.m.25 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.1AI score0.00871EPSS
SaveExploits0References2
CVE
CVE
added 2020/08/11 8:54 p.m.104 views

CVE-2020-17495

CVE-2020-17495 affects django-celery-results up to version 1.2.1: task results are stored in the database and may include the original task variables, which can contain sensitive cleartext data. The Red Hat entry reiterates that this data is stored unencrypted in the database, implying potential ...

7.5CVSS7.2AI score0.00871EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/11 8:54 p.m.43 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.4AI score0.00871EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2020/08/03 5:29 a.m.179 views

Exploit for SQL Injection in Djangoproject Django

DOBBYISFREE! - 출제된 CTF: 2020 Christmas CTFhttps://dreamh...

9.8CVSS8.3AI score0.65336EPSS
SaveExploits9
Hacker One
Hacker One
added 2020/08/02 12:07 p.m.53 views

Mail.ru: SECRET_KEY Of Django Leaked In maps.me

Token for a internal Jenkins account of maps.me was leaked via git commit...

3.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/30 12:00 a.m.24 views

FreeBSD : Wagtail -- XSS vulnerability (e1d3a580-cd8b-11ea-bad0-08002728f74c)

GitHub Advisory Database : When a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp as directed in the documentation, any HTML tags used within a form field's he...

5.7CVSS5.5AI score0.01101EPSS
SaveExploits0References3
OSV
OSV
added 2020/07/29 2:31 p.m.32 views

SUSE-RU-2020:2072-1 Security update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper

This update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow,...

9.8CVSS8.4AI score0.99856EPSS
SaveExploits20References71
OSV
OSV
added 2020/07/27 2:07 p.m.8 views

SUSE-SU-2020:2055-1 Security update for python-Django

This update for python-Django fixes the following issues: - Fixed potential XSS in admin ForeignKeyRawIdWidget bsc1172166, CVE-2020-13596...

6.1CVSS6.5AI score0.02873EPSS
SaveExploits0References3
Gitee
Gitee
added 2020/07/27 10:33 a.m.6 views

vulscan

This is a Python-based web application for vulnerability scanning and management. Here's a summary of the key features and functionality: Overview The application is built using Django, a Python web framework, and is designed to provide a user-friendly interface for vulnerability scanning and...

7.1AI score
SaveExploits0
OSV
OSV
added 2020/07/20 6:15 p.m.17 views

CVE-2020-15118

In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp, any HTML tags used within a form field's help text will be...

5.4CVSS5.4AI score
SaveExploits0References5
Prion
Prion
added 2020/07/20 6:15 p.m.15 views

Cross site scripting

In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp, any HTML tags used within a form field's help text will be...

3.5CVSS5.4AI score0.01101EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder