Google Chrome Buffer Overflow Vulnerability (CNVD-2020-00271)

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46429)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to obtain cross-origin data with the help of specially crafted HTML pages...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-46424)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from process memory with the help of specially crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-00269)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability. The vulnerability can be exploited to execute arbitrary code via specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46426)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof domain names with the help of specially crafted HTML pages...

Google Chrome cookies information disclosure vulnerability

Google Chrome is a web browser from Google, Inc. cookies is one of the cookie plug-ins. An information disclosure vulnerability exists in Google Chrome cookies, which stems from the program's failure to fully implement policies. The vulnerability can be exploited to disclose cross-origin data via...

Google Chrome Type Obfuscation Vulnerability (CNVD-2020-00274)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A type confusion vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2020-00270)

Google Chrome is a web browser from Google, and WebSockets is one of the communication protocols used to exchange data between the client and the server. Google Chrome suffers from a same-origin policy bypass vulnerability that stems from the program's failure to fully implement the policy. The...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46752)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from process memory with the help of specially crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2019-42756)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 75.0.3770.142. The vulnerability stems from the system's mismanagement of resources such as memory. A remote attacker can exploit the vulnerability to cause heap...

Cross-Site Scripting

Overview All versions of html-pages are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim's browser through folders with names containing malicious code. Recommendation No fix is currently available...

CVE-2018-20434

LibreNMS 1.46 is affected by CVE-2018-20434. The vulnerability allows remote command execution via the POST parameter $_POST['community'] used in html/pages/addhost.inc.php during device creation. A subsequent request to /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost tri...

[SECURITY] Fedora 30 Update: appstream-generator-0.7.7-1.fc30

appstream-generator is a tool to generate distribution metadata from package repositories. It will extract icons, download screenshots, validate and transform the metadata, and return XML or YAML files that can be read by AppStream clients, such as software centers. It will also generate issue...

Debian DSA-4395-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-17481 A use-after-free issue was discovered in the pdfium library. - CVE-2019-5754 Klzgrad discovered an error in the QUIC networking implementation. - CVE-2019-5755 Jay Bosamiya discovered an implementation erro...

GHSA-5P26-HW7F-3CPR Cross-Site Scripting in html-pages

All versions of html-pages are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim's browser through folders with names containing malicious code. Recommendation No fix is currently available. Conside...

Cross-Site Scripting in html-pages

All versions of html-pages are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim's browser through folders with names containing malicious code. Recommendation No fix is currently available. Conside...

Google Chrome DevTools Navigation Restriction Bypass Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's failure to handle URLs correctl...

Google Chrome Downloads Command Execution Vulnerability

Google Chrome is a web browser developed by Google.Downloads is one of the download components. A security vulnerability exists in Downloads in versions of Google Chrome prior to 66.0.3359.117, which originates when the program parses documents into HTML files. A remote attacker could exploit thi...

Google Chrome Extensions Memory Misreference Vulnerability (CNVD-2019-03601)

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A memory misreference vulnerability exists in Extensions in versions prior to Google Chrome 71.0.3578.80. A remote attacker can exploit the vulnerability to corrupt the heap with the help of...

GitLab: A profile page of a user can be denied from loading by appending .html to the username

Summary: I was able to create a user with the username "dashboard.html". Once, the account is set up, when the user clicks on his profile, the actual dashboard will show up instead of his profile page. Same can be done for all the HTML pages in GitLab. Steps To Reproduce: 1. Register a new user...