CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

Design/Logic Flaw

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

ZSQL: Check for users with WITH GRANT OPTION permission

Searches for users with the WITH GRANT OPTION permission and checks whether they are authorized to have it. Users with this permission can grant object permissions to other users. For database security, specify this permission attribute only when absolutely necessary. SPDX-FileCopyrightText: 2020...

Option to Install Veeam ONE Agent is Unavailable (Greyed Out)

Challenge When attempting to install the Veeam ONE Agent on a Veeam Backup Server, theInstall agent option is unavailable and greyed out. Cause There are several possible causes for this issue: The Veeam ONE Agent is already installed on the Veeam Backup & Replication Server. The Veeam ONE Server...

CVE-2020-10792

openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header...

PT-2020-10064

Name of the Vulnerable Software and Affected Versions Tellabs Optical Line Terminal OLT 1150 versions prior to SR30.1 and SR31.1 Description The issue allows for Remote Command Execution via the -l option to TELNET or SSH. Recommendations For versions prior to SR30.1, update to SR30.1 or later. F...

CVE-2019-19148: Improper Neutralization of Special Elements used in an OS Command

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...

openSUSE: Security Advisory for salt (openSUSE-SU-2020:0357-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

zsh: insecure dropping of privileges when unsetting PRIVILEGED option

A flaw was found in zsh. When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. When the RUID and EUID were both non-zero, it is possible to regain the shell's former privileges. Also, the setopt built-in did not correctly report...

Command Injection

Overview gulp-scss-lint is a Lint your .scss files. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands to the exec function located in src/command.js via the provided options. PoC by JHU System Security Lab var root =...

CVE-2020-5254

In NetHack before 3.6.6, some out-of-bound values for the hilitestatus option can be exploited. NetHack 3.6.6 resolves this issue...

Google Chrome 80 - JSCreate Side-effect Type Confusion (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Google Chrome 80 JSCreate side-effect type confusion exploit', 'Description' = %q This module exploits an issue in Google Chrome 80.0.3987.87 64...

Google Chrome 72 / 73 Array.map Corruption Exploit

This Metasploit module exploits an issue in Chrome version 73.0.3683.86 64 bit. The exploit corrupts the length of a float in order to modify the backing store of a typed array. The typed array can then be used to read and write arbitrary memory. The exploit then uses WebAssembly in order to...

sudo: Stack based buffer overflow when pwfeedback is enabled

A flaw was found in the Sudo application when the ’pwfeedback' option is set to true on the sudoers file. An authenticated user can use this vulnerability to trigger a stack-based buffer overflow under certain conditions even without Sudo privileges. The buffer overflow may allow an attacker to...

CVE-2020-9364

An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactformupload parameter. An attacker could exploit this...

CVE-2020-9364

An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactformupload parameter. An attacker could exploit this...

The vulnerability of the L2CAPGET_CONF_OPT function in Linux operating systems, related to the disclosure of information, allows attackers to gain access to confidential data. [source-iocs-preserved const=L2CAP_GET_CONF_OPT]

The vulnerability of the L2CAPGETCONFOPT function in Linux operating systems is related to buffer overflows in the queue. Exploiting this vulnerability allows a remote attacker to gain access to confidential data. source-iocs-preserved const=L2CAPGETCONFOPT...

Information Disclosure

ansible is vulnerable to information disclosure. The ldapattr and ldapentry modules can cause confidential information such as password to be logged in a log file or be displayed on stdout if bindpw option is set with params...

Exploit for Improper Authentication in Microsoft

CVE-2020-0688EXP CVE-2020-0688EXP Auto trigger payload...

ISPConfig SQL Injection Vulnerability

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...