7173 matches found
CVE-2023-27577
flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the LESS parser which can be exploited to read sensitive files on the server through the use of path traversal...
Path traversal
flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the LESS parser which can be exploited to read sensitive files on the server through the use of path traversal...
CVE-2023-27577 Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarum
flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the LESS parser which can be exploited to read sensitive files on the server through the use of path traversal...
CVE-2023-27577
Summary : CVE-2023-27577 affects flarum prior to 1.7.0. A compromised admin account can exploit a flaw in the LESS parser to perform path traversal and read sensitive server files (e.g., /etc/passwd) by supplying an absolute path in the custom LESS setting. The vulnerability’s impact depends on t...
forum.shellfire.de Cross Site Scripting vulnerability OBB-3213931
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-24763
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
CVE-2023-24763
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
Sql injection
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
Suprbay.org, The Pirate Bay Web Forum Down amid Cyberattack
By Deeba Ahmed The SuprBay forum has been inaccessible for a few days. This is a post from HackRead.com Read the original post: Suprbay.org, The Pirate Bay Web Forum Down amid Cyberattack...
CVE-2023-24763
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
CVE-2023-24763
CVE-2023-24763 concerns the Xen Forum module for PrestaShop. An authenticated user can perform SQL injection in versions up to 2.13.0. The vulnerability is described across multiple feeds, consistently identifying the affected component as the Xen Forum addon for PrestaShop and noting the constra...
CVE-2023-24763
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
PrestaShop SQL注入漏洞
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Xen Forum versions prior to 2.13.0. An attacker exploited the...
DRUPAL-CONTRIB-2023-008
This module enables you to associate Forums as Group 1.x content and use Group access permissions. Previous versions of the module incorrectly set node access on creation, and did not correctly restrict access to lists of forum topics...
Group control for forums - Critical - Access bypass - SA-CONTRIB-2023-008
This module enables you to associate Forums as Group 1.x content and use Group access permissions. Previous versions of the module incorrectly set node access on creation, and did not correctly restrict access to lists of forum topics...
Login Details of Tech Giants Leaked in Two Data Center Hacks
By Waqas Threat actors have hacked two data centers in Asia and accessed login credentials of top technology giants, including Apple, Uber, Microsoft, Samsung, Alibaba, etc., and leaked them on a hacker forum. This is a post from HackRead.com Read the original post: Login Details of Tech Giants...
Indian Ticketing Platform RailYatri Hacked – 31 Million Impacted
By Waqas The RailYatri hack took place in December 2022, but the stolen data has only been leaked earlier today on a prominent hacker forum. This is a post from HackRead.com Read the original post: Indian Ticketing Platform RailYatri Hacked - 31 Million Impacted...
SUSE CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
SUSE CVE-2009-0499
Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...