CVE-2020-12827: Improper Limitation of a Pathname to a Restricted Directory

MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document...

PT-2020-13277

Name of the Vulnerable Software and Affected Versions MJML versions prior to 4.6.3 Description The issue is related to a path traversal vulnerability when processing the mj-include directive within an MJML document. Recommendations For versions prior to 4.6.3, update to version 4.6.3 or later to...

CVE-2020-13651: Inclusion of Functionality from Untrusted Control Sphere

An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client...

CVE-2020-13964

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmailoutputhtml.php allows XSS via the username template object...

CVE-2020-13964: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmailoutputhtml.php allows XSS via the username template object...

PT-2021-2549

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: The issue is caused by a buffer overflow in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel, specifically affecting components arch/s390/kvm/kvm-s390.c, include/linux/kvm...

Exploit for Out-of-bounds Write in Php

This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the vulnerable configuration is present. The exploit targets PHP 7+ and works by appending a specially...

Lexiglot Path Traversal Vulnerability

Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A path traversal vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which can be exploited by remote attackers to obtain sensitive information full path with the help of...

CVE-2014-8939

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information full path via an include/smarty/plugins/modifier.dateformat.php request if PHP has a non-recommended configuration that produces warning messages...

PT-2020-7762

Name of the Vulnerable Software and Affected Versions Lexiglot through 2014-11-20 Description The issue allows remote attackers to obtain sensitive information, specifically the full path, via a request to the "include/smarty/plugins/modifier.date format.php" endpoint if PHP has a non-recommended...

CVE-2020-13252

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

CVE-2020-12826: Integer Overflow or Wraparound

A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because execid in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a donotifyparent protection mechanism. A child process can send an arbitrary signal to a parent...

Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2020-31757)

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the include/class.sla.php file in Enhancesoft osTicket versions prior to 1.14.2. The vulnerability stems from a lack of proper validation of client data in the WEB application...

CVE-2020-12629

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name...

CVE-2020-12629: Improper Neutralization of Input During Web Page Generation

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name...

PT-2020-13174

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.2 Description The issue allows for XSS via the SLA Name in the include/class.sla.php file. Recommendations For versions prior to 1.14.2, update to version 1.14.2 or later to resolve the issue...

CVE-2020-12479

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...

CVE-2020-12479

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...

Directory traversal

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...

CVE-2020-12479

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...