CVE-2022-41586

The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-46741

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

GHSA-GM5X-HPMW-XPXG Silverstripe CMS information disclosure

In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to...

SilverStripe Information Disclosure Vulnerability (CNVD-2020-42957)

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.5.0 and previous versions of a security vulnerability . Attackers can...

CVE-2020-6164

In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to...

Android Package Inspector: Inspeckage

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...

CVE-2015-4346

The CVE-2015-4346 entry describes a Cross-site scripting (XSS) vulnerability in Drupal’s SMS Framework module (6.x-1.x) prior to 6.x-1.1 when the Send to phone submodule is enabled. The root cause is insufficient sanitization of user-supplied text in message previews, allowing remote attackers to...

PT-2015-6528

Name of the Vulnerable Software and Affected Versions Drupal SMS Framework module versions 6.x-1.x before 6.x-1.1 Description A cross-site scripting XSS issue exists in the SMS Framework module for Drupal. This occurs when the "Send to phone" submodule is enabled, allowing remote attackers to...

FreePBX Framework Module view.functions.php Remote Code Execution

Added: 04/03/2014 CVE: CVE-2014-1903 BID: 65509 OSVDB: 103240 Background FreePBX is an open source telephony front-end, which has an easy to use graphical user interface that controls and manages Asterisk. Problem The Framework module of FreePBX is vulnerable to remote code execution as a result ...

FreePBX Framework Module view.functions.php Remote Code Execution

Added: 04/03/2014 CVE: CVE-2014-1903 BID: 65509 OSVDB: 103240 Background FreePBX is an open source telephony front-end, which has an easy to use graphical user interface that controls and manages Asterisk. Problem The Framework module of FreePBX is vulnerable to remote code execution as a result ...

PT-2012-1355

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Description The issue allows local users with administrative privileges to disable the product by executing an unspecified Metasploit Framework module. Recommendations For versions prior to 8.8...