openSUSE Security Update : ldb / samba (openSUSE-2020-1023)

"This update for ldb, samba fixes the following issues : Changes in samba : - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Palo Alto Software: IDOR on notes to HTML injection

Summary: Team member with role USER can change notes of any users and also we able to inject some html tags Steps To Reproduce: 1. Login in with role owner create note 1. login team member with role users 1. add note and capture with burp suite and change the uuid of notes PUT...

CVE-2020-13443: Unrestricted Upload of File with Dangerous Type

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges member is able to upload this. It is possible to bypass the MIME type check and file-extension check...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41170)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.1. An attacker non-channel member can exploit the vulnerability to modify the channel using the Channel PATCH API...

CVE-2019-20869

An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel...

CVE-2019-20869: Undefined Security Weakness

An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel...

PHPCMS version 9.1.5 to 9.6.3 SQL Injection Vulnerability in Member Module me***_mo***.php

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. PHPCMS 9.1.5 to 9.6.3 version of the membership module memo.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitiv...

GitLab: An attacker can run pipeline jobs as arbitrary user

Summary An attacker can run arbitrary pipeline jobs as a victim user. This means the attacker can access the user private repositories, member only repositories, registry, etc... by using the victim CIJOBTOKEN token. This is only my recent research and I wanted to report it as soon as possible. I...

CVE-2020-10516

An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior t...

Improper access control

An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior t...

CVE-2020-10516

GitHub Enterprise Server (API) vulnerability: improper access control allowed an organization member to escalate permissions and access unauthorized repositories within an org. Affected all versions prior to 2.21; fixed in 2.20.9, 2.19.15, and 2.18.20. Exploitation status and in‑the‑wild details ...

SQL injection vulnerability in freecms member center (CNVD-2020-33179)

FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in freecms member center (CNVD-2020-33180)

FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in freecms member center (CNVD-2020-33184)

FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in freecms member center (CNVD-2020-33181)

FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in freecms Member Center

FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...

Member of global child abuse ring caught with 650,000 images, videos

By Waqas He will not rot in hell for years. This is a post from HackRead.com Read the original post: Member of global child abuse ring caught with 650,000 images, videos...

Debian DLA-2210-1 : apt security update

When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such characters, because the code did not stop at 0, but would wrap around and continue reading from the stack, without any limit. For Debian 8...

Updated openldap packages fix security vulnerabilities

Updated openldap packages fix security vulnerabilities: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service slapd crash via a member MODDN operation CVE-2017-17740. I...

Library CMS Powerful Book Management System 2.2.0 - Session Fixation

Exploit Title: Library CMS Powerful Book Management System 2.2.0 - Session Fixation Date: 2020-04-22 Exploit Author: Ismail Tasdelen Vendor Homepage: https://kaasoft.pro/ Software : https://codecanyon.net/item/library-cms-powerful-book-management-system/21105281 Product Version: v2.2.0 Product :...