CVE-2019-15124

The CVE-2019-15124 entry refers to a stored/reflected cross-site scripting (XSS) vulnerability in the MobileFrontend extension for MediaWiki, specifically in the edit summary field of the watchlist feed. Affected branches are REL1_31, REL1_32, and REL1_33. The vulnerability arises from XSS in the...

CVE-2020-8467

creationtimestamp| type| source ---|---|--- 2020-03-18 10:15:02+00:00| exploited| https://t.me/SecLabNews/7124 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 03:17:32+00:00| seen|...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

[SECURITY] Fedora 31 Update: python-feedgen-0.9.0-1.fc31

Feedgenerator This module can be used to generate web feeds in both ATOM and RSS format. It has support for extensions. Included is for example an exten sion to produce Podcasts...

CVE-2019-18988

creationtimestamp| type| source ---|---|--- 2020-02-07 15:33:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/teamviewerpasswords.rb 2020-02-21 03:55:25+00:00| exploited| https://t.me/informationsecuritychannel/35219 2021-11-08...

Talos Takes back with new episode, feed

By Jon Munshaw. Talos Takes, our new bite-size podcast, is back with its own feed and a new show. We first unveiled Talos Takes in early December, and took some time to develop a new Talos Podcasts page to accommodate Talos Takes and Beers with Talos. Now you have two Talos shows you can subscrib...

Cross site scripting

Cross-site scripting XSS vulnerability in vwrooms/js/jsor-jcarousel/examples/specialtextscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary web script or HTML via a URL to a crafted SVG file in the feed parameter...

CVE-2019-18187

creationtimestamp| type| source ---|---|--- 2020-01-27 14:04:36+00:00| exploited| https://t.me/truesecator/81 2020-03-18 10:11:36+00:00| exploited| https://t.me/truesecator/334 2020-03-18 10:35:38+00:00| exploited| https://t.me/avdno/704 2021-11-08 08:58:20+00:00| seen|...

CVE-2007-6758

Server-side request forgery SSRF vulnerability in feed-proxy.php in extjs 5.0.0...

CVE-2007-6758

Server-side request forgery SSRF vulnerability in feed-proxy.php in extjs 5.0.0...

CVE-2007-6758

CVE-2007-6758 describes a Server-Side Request Forgery (SSRF) in feed-proxy.php of ExtJS 5.0.0. Affected component/file: feed-proxy.php; root cause not detailed in available documents beyond SSRF. Impact semantics: CVSS v2 base score 5.0 (MEDIUM) and CVSS v3.1 base score 7.5 (HIGH) with Network ac...

CVE-2020-2551

creationtimestamp| type| source ---|---|--- 2020-01-21 19:54:53+00:00| seen| https://t.me/HackerOne/2598 2021-03-27 21:09:01+00:00| seen| https://t.me/reconshell/599 2021-09-05 16:58:17+00:00| published-proof-of-concept| https://t.me/infosec1z/47 2023-01-06 07:19:03+00:00|...

CVE-2019-20085

creationtimestamp| type| source ---|---|--- 2020-01-21 14:52:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tvtnvmstraversal.rb 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen|...

CVE-2012-4451

Multiple cross-site scripting XSS vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 Debug, 2 Feed\PubSubHubbub, 3 Log\Formatter\Xml, 4 Tag\Cloud\Decorator, 5 Uri, 6 View\Helper\HeadStyle, 7...

UBUNTU-CVE-2012-4451

Multiple cross-site scripting XSS vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 Debug, 2 Feed\PubSubHubbub, 3 Log\Formatter\Xml, 4 Tag\Cloud\Decorator, 5 Uri, 6 View\Helper\HeadStyle, 7...

Reminder: CISA Publishes Weekly Vulnerability Summaries

Did you know that the Cybersecurity and Infrastructure Security Agency CISA publishes a weekly Vulnerability Bulletin? This recurring item provides a summary of all new vulnerabilities that have been recorded by the CISA-sponsored National Institute of Standards and Technology NIST National...

mybb -- multible vulnerabilities

mybb Team reports: High risk: Installer RCE on settings file write Medium risk: Arbitrary upload paths and Local File Inclusion RCE Medium risk: XSS via insufficient HTML sanitization of Blog feed and Extend data Low risk: Open redirect on login Low risk: SCEditor reflected XSS...

CVE-2019-6031

Cross-site scripting vulnerability in KINZA for Windows version 5.9.2 and earlier and for Mac version 5.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via RSS reader...

PYSEC-2019-136

Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if a front-end serve...

CVE-2019-1458

creationtimestamp| type| source ---|---|--- 2019-12-10 19:52:29+00:00| exploited| https://t.me/ctinow/18489 2019-12-10 21:20:08+00:00| exploited| https://t.me/ctinow/18498 2019-12-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=439 2019-12-11 07:30:18+00:00| seen|...