Fedora: Security Advisory for golang-github-gohugoio-testmodbuilder (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: golang-github-gohugoio-testmodbuilder-0-0.9.20201030git72e1e0c.fc34

Some helper scripts used for Hugo testing...

TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension...

Combodo iTop 跨站脚本漏洞

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management, and problem management. A security vulnerability exists in Combodo iTop, which ste...

PT-2022-11369 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions 3.0.0 beta releases prior to beta6 Description: The issue concerns a web-based IT Service Management tool where the ajax.render.php?operation=wizard helper page did not properly escape user-supplied parameters, allowing...

zbzcms arbitrary file upload vulnerability (CNVD-2022-30432)

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

zbzcms cross-site scripting vulnerability

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a cross-site scripting vulnerability, no detailed vulnerability details are currently available...

zbzcms arbitrary file upload vulnerability

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

zbzcms access control error vulnerability

zbzcms Station Helper CMS is a content management website from China Station Helper CMS zbzcms. zbzcms version 1.0 is vulnerable to an access control error, which can be exploited by attackers to arbitrarily add administrator accounts...

zbzcms SQL Injection Vulnerability

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a SQL injection vulnerability, which originates from a SQL injection vulnerability found through the art parameter of /include/make.php. No detailed vulnerability details are...

CVE-2022-28544

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store...

Samsung Galaxy Store路径遍历漏洞

Samsung Mobile Samsung Galaxy Store is an application store of Samsung Mobile, a South Korean company. A security vulnerability exists in Galaxy store versions prior to 4.5.40.5, which stems from a path traversal vulnerability in the unzip method of InstallAgentCommonHelper. An attacker could...

zbzcms代码问题漏洞

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

zbzcms安全漏洞

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file deletion vulnerability, no detailed vulnerability details are provided at this time...

zbzcms 跨站脚本漏洞

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a cross-site scripting vulnerability, no detailed vulnerability details are currently available...

Gitbleed_Tools - For Extracting Data From Mirrorred Git Repositories

This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog post. What Do These Scripts Do? These scripts will clone a copy of the give...

PT-2022-13735 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat/livehelperchat versions prior to 3.96 Description: The issue concerns a weak secrethash that can be brute-forced, affecting the security measures of the application. The secrethash is relatively small, consisting of only 10...

CVE-2022-1191

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...

livehelperchat 代码问题漏洞

livehelperchat is available via live helper chat, which provides free live support on the site. livehelperchat versions prior to 3.96 are vulnerable to a code issue stemming from SSRF on index.php/cobrowse/proxycss/. An attacker could exploit this vulnerability to cause the application to execute...

SSRF on index.php/cobrowse/proxycss/

Description Live Helper Chat is vulnerable to SSRF on the /index.php/cobrowse/proxycss endpoint. It's possible to make internal requests and see the response as an authenticated user, it's also possible to make an request with any protocol using goppher://. Proof of Concept 1. Request...