PT-2015-5025

Name of the Vulnerable Software and Affected Versions puppetlabs-stdlib module versions 2.1 through 3.0 puppetlabs-stdlib module versions 4.1.0 through 4.5.x Description The issue allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache...

Code injection

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the 1 fact or 2 report import API...

CVE-2013-0171

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the 1 fact or 2 report import API...

CVE-2013-0171

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the 1 fact or 2 report import API...

CVE-2013-0171

CVE-2013-0171 affects Foreman prior to version 1.1. The vulnerability allows remote attackers to execute arbitrary code by sending a crafted YAML object to the fact or report import API. Documents confirm impact as remote code execution with network access and no authentication required, but do n...

CVE-2013-0171: Improper Control of Generation of Code

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the 1 fact or 2 report import API...

PT-2014-2426

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue allows remote attackers to execute arbitrary code by sending a crafted YAML object to specific API endpoints, including the fact or report import API. Recommendations For versions prior to 1....

Reality Based Cyber Crime Novella Explores Aftermath of Stuxnet Attack On Iran

Reality Based Cyber Crime Novella Explores Aftermath of Stuxnet Attack On Iran GRAND RAPIDS – Cyber Styletto is a new novella by a journalist, a writer, and a security expert who have pooled their talents to create an enthralling good read that is future forward and predictive. The facts are base...

Unfixed XSS vulnerability at search6.fact-finder.de

Security researcher Darkster, has submitted on 23/07/2007 a cross-site-scripting XSS vulnerability affecting search6.fact-finder.de, which at the time of submission ranked 90028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at search3.fact-finder.de

Security researcher Darkster, has submitted on 07/08/2007 a cross-site-scripting XSS vulnerability affecting search3.fact-finder.de, which at the time of submission ranked 90028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...