Rukovoditel 跨站脚本漏洞

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other features. A cross-site scripting vulnerability exists in Rukovoditel, which stems from the failure of the Name of...

Fedora: Security Advisory for tor (FEDORA-2021-847ca2749a)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

✍️ Description Stored xss via generalsettings 🕵️‍♂️ Proof of Concept 1. gotohttps://demo.livehelperchat.com/siteadmin/chatbox/configuration and update a General settings with xss payload xss"'' and save it . 2. now try to edit this Chatbox settings using url like...

CVE-2021-40089

An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the System Configuration setting Enable External Script Access was disabled. With this setting disable...

PT-2021-22799 · Primekey · Ejbca

Name of the Vulnerable Software and Affected Versions: PrimeKey EJBCA versions prior to 7.6.0 Description: An issue was found where the General Purpose Custom Publisher could still run even when the System Configuration setting Enable External Script Access was disabled. Although this setting...

CVE-2021-40089: Undefined Security Weakness

An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the System Configuration setting Enable External Script Access was disabled. With this setting disable...

Code injection

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

PT-2021-10834

Name of the Vulnerable Software and Affected Versions webTareas version 2.0 Description A Path Traversal issue exists via the extpath parameter in general serv.php, which could let a malicious user read arbitrary files. Recommendations For webTareas version 2.0, consider restricting access to the...

Fedora: Security Advisory for rust-tokei (FEDORA-2021-60f0e1bb35)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-asyncgit (FEDORA-2021-3cf88e44b4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-git-version-macro (FEDORA-2021-3cf88e44b4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

NSA Watchdog Will Review Tucker Carlson Spy Claims

The National Security Agency’s Inspector General Robert Storch has announced a review of whether the agency illegally conducted cyber-espionage and collected the electronic communications of Fox News opinion-show host Tucker Carlson, who has accused the NSA of trying to capture embarrassing...

Mozilla Rust Cross-Site Scripting Vulnerability (CNVD-2021-61406)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A cross-site scripting vulnerability exists in comrak crate in versions of Mozilla Rust prior to 0.10.1, which could be exploited by an attacker to execute the script in a Web browser in the secure context of a...

Mozilla Rust Denial of Service Vulnerability (CNVD-2021-61402)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust suffers from a denial-of-service vulnerability that can be exploited by attackers to cause data contention by sending specially crafted requests...

CVE-2021-37211

The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks...

PT-2021-29679

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description A potential security issue has been identified in the Linux Kernel, related to a fix for a General Protection Fault GPF in diFree. The actual impact and attack plausibility have not yet been...

PT-2021-25859

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A potential security issue has been identified in the jfs module of the Linux Kernel, which could lead to a General Protection Fault GPF in the diFree function. The actual impact and attack...

PT-2021-25684

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: A potential security issue has been identified in the jfs component of the Linux Kernel, which could lead to a General Protection Fault GPF in the diFree function. The actual impact and atta...

PT-2021-25924

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A potential security issue has been identified in the jfs module of the Linux Kernel, which could lead to a General Protection Fault GPF in the diFree function. The actual impact and attack...

Fedora: Security Advisory for mingw-exiv2 (FEDORA-2021-0b27f220bd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...