CVE-2021-33666: Improper Neutralization of Input During Web Page Generation

When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation...

SUSE: Security Advisory (SUSE-SU-2020:14356-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the security update for Outlook 2016: June 8, 2021 (KB5001942)

None None...

SAP Commerce Cloud 跨站脚本漏洞

SAP Commerce Cloud is a set of cloud-based e-commerce platform from Germany's SAP. It supports sales management, marketing management, order management, and operations management. SAP Commerce Cloud suffers from a cross-site scripting vulnerability that stems from a vulnerability in MIME sniffing...

Oracle Linux 8 : thunderbird (ELSA-2021-2264)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2264 advisory. 78.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.11.0-1 - Update to 78.11.0 build1 Tenable has...

Oracle Linux 7 : thunderbird (ELSA-2021-2263)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2263 advisory. 78.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.11.0-1 - Update to 78.11.0 build1 Tenable has...

Mozilla: Partial protection of inline OpenPGP message not indicated

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird 78.10.2...

BloofoxCms File Upload Vulnerability

BloofoxCms is alexlang24 BloofoxCms individual developers of a Php-based text content management system. A code issue exists in BloofoxCMS version 0.5.2.1, which can be exploited to bypass MIME type validation by inserting "image jpeg" in the "Content-Type" header. The vulnerability can be...

CVE-2020-36141

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

CVE-2020-36141

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

Unrestricted file upload

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

CVE-2020-36141

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

CVE-2020-36141

BloofoxCMS 0.5.2.1 is affected by an Unrestricted File Upload vulnerability caused by bypassing MIME-type validation through a Content-Type header (injecting image/jpeg). Multiple connected sources (CNVD, NVD, OSV, CVE records, PTA/PT- security entry) corroborate the issue and its association wit...

CVE-2020-36141

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

PT-2021-11927 · Unknown · Bloofoxcms

Name of the Vulnerable Software and Affected Versions: BloofoxCMS version 0.5.2.1 Description: The issue allows for Unrestricted File Upload by bypassing MIME Type validation. This can be achieved by inserting 'image/jpeg' within the 'Content-Type' header, potentially allowing malicious files to ...

BloofoxCms 代码问题漏洞

BloofoxCms is alexlang24 BloofoxCms individual developers of a Php-based text content management system. A code issue exists in BloofoxCMS version 0.5.2.1, which can be exploited to bypass MIME type validation by inserting "image jpeg" in the "Content-Type" header. The vulnerability can be...

CVE-2020-36141: Unrestricted Upload of File with Dangerous Type

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

The vulnerability of the Thunderbird email client arises due to insufficient implementation of security measures, allowing attackers to compromise data integrity.

The vulnerability of the Thunderbird email client exists due to insufficient implementation of security measures. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially crafted email with MIME encoding. Such emails contain an embedded signed or...

Selenium 3.141.59 - Remote Code Execution (Firefox/geckodriver)

Exploit Title: Selenium 3.141.59 - Remote Code Execution Firefox/geckodriver Date: 2021-05-27 Exploit Author: Jon Stratton Vendor Homepage: https://www.selenium.dev/ Software Link: https://selenium-release.storage.googleapis.com/3.141/selenium-server-standalone-3.141.59.jar Version: 3.141.59 Test...

PHPFusion 9.03.50 - Remote Code Execution Exploit

Exploit Title: Selenium 3.141.59 - Remote Code Execution Firefox/geckodriver Exploit Author: Jon Stratton Vendor Homepage: https://www.selenium.dev/ Software Link: https://selenium-release.storage.googleapis.com/3.141/selenium-server-standalone-3.141.59.jar Version: 3.141.59 Tested on: Selenium...