1615 matches found
HackerOne: A small set of users were assigned someone else's payout preference
On December 20th, 2016, HackerOne introduced a new payout preference that allowed employee bounties to be paid through payroll. At the time, a feature was added to our support backend that allowed the IT department to provision this special payout preference for HackerOne employees. To help the I...
GHSA-XJ62-87PG-VCV3 Regular Expression Denial of Service in jshamcrest
The jshamcrest package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in to the emailAddress validator. Proof of concept js var js = require'jshamcrest' var emailAddress = new js.JsHamcrest.Matchers.emailAddress; var genstr = functi...
Fedora Update for perl-Email-Address-List FEDORA-2019-ef5551fcff
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 28 Update: perl-Email-Address-List-0.06-1.fc28
Parser for From, To, Cc, Bcc, Reply-To, Sender and previous prefixed with Resent- e.g. Resent-From headers...
[SECURITY] Fedora 29 Update: perl-Email-Address-List-0.06-1.fc29
Parser for From, To, Cc, Bcc, Reply-To, Sender and previous prefixed with Resent- e.g. Resent-From headers...
Fedora 28 : perl-Email-Address-List (2019-ef5551fcff)
Upstream bugfix. CVE-2018-18898 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora 29 : perl-Email-Address-List (2019-73cbc02e14)
Upstream bugfix. CVE-2018-18898 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Design/Logic Flaw
An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, where :email is a base64 encoded e-mail address, to receive confirmation as to whether a user account exists in the system with the specifie...
FreeBSD : p5-Email-Address-List -- DDoS related vulnerability (22b90fe6-258e-11e9-9c8d-6805ca0b3d42)
Best PRactical Solutions reports : 0.06 2019-01-02 - Changes to address CVE-2018-18898 which could allow DDoS-type attacks. Thanks to Lukas Kramer for reporting the issue and Alex Vandiver for contributing fixes. - Fix pathological backtracking for unkown regex - Fix pathological backtracking in...
Joomla JamBook 1.5 SQL Injection
Exploit Title : Joomla JamBook Components 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 01/02/2019 Vendor Homepage : joomlacode.org Software Download Link : joomlacode.org/gf/project/jambook/ Software Version : 1.0 and 1.5 Tested On : Windows...
MGASA-2019-0046 Updated perl-Email-Address package fixes security vulnerability
The parse method in the Email::Address module through 1.912 for Perl can consume a large amount of resources on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f" CVE-2018-12558...
Updated perl-Email-Address package fixes security vulnerability
The parse method in the Email::Address module through 1.912 for Perl can consume a large amount of resources on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f" CVE-2018-12558...
Twitter Android Glitch Exposed Private Tweets for Years
Twitter disclosed a security issue on Thursday that had exposed protected tweets on Android devices – for more than four years. According to the social media giant, if Twitter users on the Android operating system made specific changes to their account settings – like changing the email address...
[SECURITY] Fedora 29 Update: perl-Email-Address-1.912-1.fc29
This class implements a regex-based RFC 2822 parser that locates email addresses in strings and returns a list of Email::Address objects found. Alternatively you may construct objects manually. The goal of this software is to be correct, and very very fast...
[SECURITY] Fedora 28 Update: perl-Email-Address-1.912-1.fc28
This class implements a regex-based RFC 2822 parser that locates email addresses in strings and returns a list of Email::Address objects found. Alternatively you may construct objects manually. The goal of this software is to be correct, and very very fast...
Fedora 29 : perl-Email-Address (2019-026d5ab23d)
Update to 1.912, fixes CVE-2015-7686 and CVE-2018-12558. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora Update for perl-Email-Address FEDORA-2019-8deebad756
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 28 : perl-Email-Address (2019-8deebad756)
Update to 1.912, fixes CVE-2015-7686 and CVE-2018-12558. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
LimeSurvey < 2.72.4 XSS Vulnerability
LimeSurvey is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
