CVE-2017-15123

A flaw was found in the CloudForms web interface where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines...

Opencart extension/feed/google_base denial of service vulnerability (CNVD-2019-23126)

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A denial of service vulnerability exists in Opencart 3.0.3.2 extension/feed/googlebase, which can be exploited by an attacker to cause a...

CVE-2019-6981

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component...

CVE-2019-6981

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component...

Server side request forgery (ssrf)

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component...

CVE-2019-6981

CVE-2019-6981 affects Zimbra Collaboration Suite 8.7.x through 8.8.11 and is described as a Blind SSRF vulnerability in the Feed component. Public sources in the provided documents confirm the issue exists in the specified product range, with no details on exploit vectors beyond SSRF and no patch...

CVE-2019-6981

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component...

CVE-2019-1069

creationtimestamp| type| source ---|---|--- 2019-05-23 08:09:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/nollapaivahaavoittuvuuksia-windows-10-kayttojarjestelmassa 2020-10-09 13:20:00+00:00| seen| MISP/fbff27c0-f30f-445c-92af-76781df1856d 2020-10-26 14:14:23+00:00| seen|...

GitLab CE/EE CRLF Injection Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An injection vulnerability exists in GitLab Community and...

Information Disclosure

Mozilla Thunderbird is vulnerable to information disclosure. Attackers can use a crafted CSS in an RSS feed that would leak and reveal local path strings, which may contain user name...

Cross Site Scripting (XSS)

Mozilla Thunderbird is vulnerable to cross site scripting XSS vulnerability. This affects an unknown functionality of the component RSS Feed Handler. Attackers can execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website...

GE EP-1901 RSTi-EP 1 Safe Feed-Input, 24 VDC Detection

Binary data 755534.prm...

GE EP-1922 RSTi-EP 2 Safe Feed-Inputs, 24 VDC Detection

Binary data 755536.prm...

GE EP-1902 RSTi-EP 2 Safe Feed-Inputs, 24 VDC Detection

Binary data 755535.prm...

Clickjacking Attack

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform

A cybersecurity professional today demonstrated a long-known unpatched weakness in Microsoft's Azure cloud service by exploiting it to take control over Windows Live Tiles , one of the key features Microsoft built into Windows 8 operating system. Introduced in Windows 8, the Live tiles feature wa...

CVE-2018-16259

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings largefeedlimit. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of b...

CVE-2018-16259

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings largefeedlimit. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of b...

PT-2019-9291 · WordPress · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import plugin version 3.4.9 Description: There is an issue with the WP All Import plugin for WordPress, specifically via the large feed limit in pmxi-admin-settings, which may allow for an XSS attack. However, the vendor notes that thi...

CVE-2019-0859

creationtimestamp| type| source ---|---|--- 2019-04-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=378 2019-04-10 12:26:05+00:00| exploited| https://t.me/CyberGovIL/413 2019-04-15 12:12:05+00:00| seen| https://t.me/ctinow/10341 2019-04-15 23:07:12+00:00| seen|...