hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2018-8768 via notebook (5.0.0)

notebook PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-8768 Source advisory: GHSA-6CWV-X26C-W2Q4...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2018-8768 via notebook (5.0.0)

notebook PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-8768 Source advisory: OSV:PYSEC-2018-57...

hugo-jupyter (>=0.2.1, <=0.3.0), ipynb-path (>=0.1.2, <=0.1.3) +2 more potentially affected by CVE-2018-8768 via notebook (>=4.2.3, <=5.0.0)

notebook PYPI version =4.2.3, =0.2.1, =0.1.2, =0.5.0, =0.1.0, =0.2.0.dev1 Source cves: CVE-2018-8768 Source advisory: MEND:CVE-2018-8768...

django-sftp (0.1.0), hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2018-7750 via paramiko (2.2.1)

paramiko PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp 0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-7750 Source advisory: OSV:PYSEC-2018-19...

django-sftp (0.1.0), hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2018-7750 via paramiko (2.2.1)

paramiko PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp 0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-7750 Source advisory: MEND:CVE-2018-7750...

sbazar.cz XSS vulnerability

Open Bug Bounty ID: OBB-552485 Description| Value ---|--- Affected Website:| sbazar.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +6 more potentially affected by CVE-2017-16876 via mistune (>=0.7.3, <=0.7.4)

mistune PYPI version =0.7.3, =0.0.1, =0.0.1, =0.0.6, =0.2.1, =2.2.20170208112505, =0.1.0, =0.1.2, =0.3.2 Source cves: CVE-2017-16876 Source advisory: MEND:CVE-2017-16876...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +6 more potentially affected by CVE-2017-15612 via mistune (>=0.7.3, <=0.7.4)

mistune PYPI version =0.7.3, =0.0.1, =0.0.1, =0.0.6, =0.2.1, =2.2.20170208112505, =0.1.0, =0.1.2, =0.3.2 Source cves: CVE-2017-15612 Source advisory: MEND:CVE-2017-15612...

Joomla! Component com_docman - Multiple Vulnerabilities

Joomla! Component comdocman - Multiple Vulnerabilities Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 13/07/2015 Vendor Homepage:...

Joomla Docman Path Disclosure / Local File Inclusion Vulnerabilities

Joomla Docman suffers from full path disclosure and local file inclusion vulnerabilities. Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: email protected Date:...

Joomla Docman Path Disclosure / Local File Inclusion

Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 13/07/2015 Vendor Homepage:...

WordPress BackupBuddy Backup Disclosure

WordPress 'BackupBuddy' Plugin Exposure Backup File to Unauthorized Control CWE: CWE-530 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 15/05/2015 Vendor Homepage: https://ithemes.com/purchase/backupbuddy/ Google Dork: inurl:/wp-content/uploads/backupbuddytemp/ Po...

WordPress Backup Plus Backup Disclosure

WordPress 'WP Backup Plus' Plugin Exposure Backup File to Unauthorized Control CWE: CWE-530 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 15/05/2015 Vendor Homepage: http://wpbackupplus.com/ Google Dork: inurl:/wp-content/uploads/wp-backup-plus/ PoC :...

WordPress Download Manager Arbitrary File Download

WordPress Download Manager Plugin - Arbitrary File Download CWE: CWE-98 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 25/10/2014 Vendor Homepage: https://wordpress.org/plugins/download-manager/ Tested on: Windows 7 and Gnu/Linux Google Dork:...

WordPress HTML5 / Flash Player SQL Injection

WordPress HTML5 and FLash PLayer Plugin SQL Injection CWE: CWE-89 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 24/10/2014 Vendor Homepage: https://wordpress.org/plugins/player/ Tested on: Windows 7 and Gnu/Linux Google Dork: inurl: "Index of"...

Mulitple WordPress Themes (admin-ajax.php, img param) - Arbitrary File Download

No description provided by source. WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405...

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage:...

WordPress Multiple Themes Arbitrary File Download

WordPress Ultimate Theme Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://www.techerhut.com/download-x-v1-7-5-the-ultimate-wordpress-theme-themeforest/ Tested on: Windows 7 and Gnu/Linux Google Dork...

PerfectWare CMS SQL Injection

PerfectWare CMS SQL Injection Risk: High CWE number: CWE-89 Author: Hugo Santiago dos Santos Contact: [email protected] Date: 09/05/2014 Vendor Homepage: http://www.perfectware.com.br/ Robson Gutierrez Tested on: Windows 7 and Gnu/Linux Google Dork: intext:Desenvolvimento By Robson Gutierrez U...

Enquete yS 1.0 SQL Injection

Enquete yS - Full v. 1.0 POST SQL Injection in Panel Admin Risk: High CWE number: CWE-89 Author: Hugo Santiago dos Santos Contact: [email protected] Date: 08/05/2014 Vendor Homepage: http://phpbrasil.com/script/AG216GUqK7nS/enquete-ys--full-v-10-yourspotcombr Version: v1.0 Tested on: Windows 7...