CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

Server side request forgery (ssrf)

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

Server Side Request Forgery(SSRF) in the Jira Trello importer - CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

Server Side Request Forgery(SSRF) in the Jira Trello importer - CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

GIMP - Heap Buffer Overflow Vulnerability

GNOME reports: CVE-2017-17786 Out of bounds read / heap overflow in tga importer / function bgr2rgb.part.1...

UBUNTU-CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

Faraday v2.7 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you have alwasy been looking for! It maps and leverages all the data you generate in real time , letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the risks and impacts and risks being assessed by the...

Buffer Overflow Vulnerability in Multiple Stepok Products Processing TGA Files

Stepok Light Developer is a professional photo post-processing tool.Stepok Recomposit is a Chinese version of the photo compositing software.Stepok RAW Importer is a RAW file conversion software, you can convert RAW photos to JPG images, support for opening and converting most of the digital came...

uaraus.altervista.org XSS vulnerability

Vulnerable URL: http://uaraus.altervista.org/index.php?filename=en/content/categories/Blender/DEMimporter.html'"--!confirmOPENBUGBOUNTY...

[SECURITY] Fedora 24 Update: kf5-mailimporter-16.08.2-1.fc24

Mail importer library...

WordPress E-Commerce CVS Importer Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress E-Commerce CVS Importer Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Advanced Importer Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A cross-site scripting vulnerability exists in the WordPress Advanced Importer plugin, which can be exploited by an attacker to inject arbitrary web script or HTML...

WordPress CSV Importer Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language.CSV Importer is one of the plug-ins for importing CSV or XML files. A cross-site scripting vulnerability exists in version 1.0 of the WordPress CSV Importer plugin, which can be exploited by...

WordPress WP Advanced Importer Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress WP Advanced Importer Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Advanced Importer Plugin <= 2.1.1 - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because “alertmsg” parameter is not sanitized. Solution Update the plugin...

WP Advanced Importer Plugin <= 2.1.1 - Reflected Cross-Site Scripting (XSS)

The WP Advanced Importer WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Ultimate CSV Importer 3.8.6 Cross Site Scripting

FULL DISCLOSURE Product : WP-Ultimate CSV Importer Exploit Author : Rahul Pratap Singh Version : 3.8.6 Home page Link : https://wordpress.org/plugins/wp-ultimate-csv-importer Website Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date Date : 27/Jan/201...

WP Ultimate CSV Importer <= 3.8.6 - Reflected Cross-Site Scripting (XSS)

The Import and Export WordPress Data as CSV or XML WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Ultimate CSV Importer Plugin <= 3.8.6 - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because "alertmsg" parameter is not sanitized. Solution Update the plugin...