EUVD-2020-17096

Malware in sbrugna...

CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

MineTime Cross-Site Scripting Vulnerability

MineTime is an intuitive and smart calendar application. A cross-site scripting vulnerability exists in MineTime 1.8.5 and earlier versions that can be exploited by an attacker to execute code via the notes field in a meeting invitation...

CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

Command injection

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

CVE-2020-24364

MineTime (version 1.8.5 and earlier) is affected by CVE-2020-24364. The vulnerability allows arbitrary command execution via the notes field in a meeting invitation, potentially leading to remote code execution. The CVSS metrics indicate a high-severity impact (CVSSv3.1 HR, network attack vector,...

CVE-2020-24364: Improper Neutralization of Special Elements in Output Used by a Downstream Component

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

PT-2020-15708

Name of the Vulnerable Software and Affected Versions MineTime versions prior to 1.9 Description The issue allows arbitrary command execution via the notes field in a meeting, which could lead to remote code execution RCE via a meeting invite. Recommendations For versions prior to 1.9, update to...