10300 matches found
CVE-2020-24917
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...
CVE-2020-24917
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...
CVE-2020-24917
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...
PT-2020-15856
Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.3 Description The issue allows for XSS attacks through a crafted filename to the DraftAjaxAPI:: uploadInlineImage function in include/ajax.draft.php. Recommendations For versions prior to 1.14.3, update to versi...
CVE-2020-24917: Improper Neutralization of Input During Web Page Generation
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...
PT-2020-14795
Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.3 Description The issue arises from an unvalidated echo call in the include/staff/banrule.inc.php file, specifically echo $info'notes', which allows for XSS attacks. Recommendations For versions prior to 1.14.3,...
CVE-2020-16193: Improper Neutralization of Input During Web Page Generation
osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...
PT-2020-14498
Name of the Vulnerable Software and Affected Versions TerraMaster TOS versions prior to 4.1.29 Description The issue is related to Invalid Parameter Checking, which leads to code injection as root. This is a dynamic class method invocation vulnerability in the include/exportUser.php file. An...
RosarioSIS Cross-Site Scripting Vulnerability
RosarioSIS is a student information system for school management. A cross-site scripting vulnerability exists in RosarioSIS 6.7.2. The vulnerability stems from improper validation of user-supplied input in the PrintSchedules.php script. A remote attacker can exploit the vulnerability by using the...
openSUSE Security Update : nasm (openSUSE-2020-952)
This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...
openSUSE Security Update : nasm (openSUSE-2020-954)
This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...
PT-2020-14605
Name of the Vulnerable Software and Affected Versions RosarioSIS version 6.7.2 Description The issue is caused by improper validation of user-supplied input by the PrintSchedules.php script, allowing a remote attacker to exploit it using the include inactive parameter in a crafted URL...
Exploit for Out-of-bounds Write in Php
This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the configuration is vulnerable. The exploit targets the "shortopentag" and "htmlerrors" php.ini setting...
SRC-2020-0022 : Microsoft SharePoint Server DataFormWebPart CreateChildControls Server-Side Include Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the DataFormWebPart class. The issue results from the lack of prope...
CURL-CVE-2020-8177 curl overwrite local file with -J
curl can be tricked by a malicious server to overwrite a local file when using -J --remote-header-name and -i --include in the same command line. The command line tool offers the -J option that saves a remote file using the filename present in the Content-Disposition: response header. curl then...
PT-2020-3018
Name of the Vulnerable Software and Affected Versions curl versions 7.20.0 through 7.70.0 Description The issue exists due to a logical error in handling the Content-Disposition header of an HTTP response. This can allow a remote attacker to overwrite a local file. The vulnerability is related to...
CVE-2020-12827
MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document...
Path traversal
MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document...