[SECURITY] Fedora 30 Update: rubygem-activerecord-5.2.3-1.fc30

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

Fedora Update for rubygem-activerecord FEDORA-2019-1cfe24db5c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALSA-2019:0984 Moderate: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. SQLAlchemy is an...

RLSA-2019:0984 Moderate: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. SQLAlchemy is an...

@loke/mysql-orm (1.12.0), bell.js (>=2.0.0-alpha.1, <=2.0.5) +37 more potentially affected by CVE-2016-10556 via sequelize (>=3.0.1, <=3.19.3)

sequelize NPM version =3.0.1, =2.0.0-alpha.1, =1.0.2, =0.1.0, =2.8.0, =0.0.1, =10.0.2, =0.0.1, =0.0.1, =0.1.0, =1.0.2, =0.0.1, =5.0.0-rc, =6.0.0-rc6 and more Source cves: CVE-2016-10556 Source advisory: GHSA-9C2P-JW8P-F84V...

@loke/mysql-orm (1.12.0), bell.js (>=2.0.0-alpha.1, <=2.0.5) +37 more potentially affected by CVE-2016-10556 via sequelize (>=3.0.1, <=3.19.3)

sequelize NPM version =3.0.1, =2.0.0-alpha.1, =1.0.2, =0.1.0, =2.8.0, =0.0.1, =10.0.2, =0.0.1, =0.0.1, =0.1.0, =1.0.2, =0.0.1, =5.0.0-rc, =6.0.0-rc6 and more Source cves: CVE-2016-10556 Source advisory: OSV:GHSA-9C2P-JW8P-F84V...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-mock (1.2.3) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.3)

org.springframework:spring-web MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-mock 1.2.3 -...

net.sourceforge.openutils:openutils-bshd5 (0.1), net.sourceforge.openutils:openutils-spring (0.1) +11 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.6)

org.springframework:spring-webmvc MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.openutils:openutils-bshd5 0.1 - net.sourceforge.openutils:openutils-spring 0....

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-orm (1.2.4) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.4)

org.springframework:spring-webmvc MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-orm 1.2.4 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-orm (1.2.3) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.3)

org.springframework:spring-webmvc MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-orm 1.2.3 -...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-orm (1.2.1) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.1)

org.springframework:spring-webmvc MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-orm 1.2.1 -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

BurpBounty - A Extension Of Burp Suite That Improve An Active And Passive Scanner

This extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an improvement of the payload to send, we can create our own issue...

CVE-2016-10550

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the limit or order parameters, a malicious user can put in their own SQL statements. This affects sequeliz...

Input validation

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the limit or order parameters, a malicious user can put in their own SQL statements. This affects sequeliz...

CVE-2016-10550

The CVE-2016-10550 issue affects sequelize (ORM for Node.js) where user input into limit or order parameters can be used to inject SQL. Concrete details across documents show affected version: 3.16.0 and earlier. Root cause is improper handling of input in query construction, enabling SQL stateme...

CVE-2016-10554

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escapin...

CVE-2016-10554

The CVE concerns sequelize (Node.js ORM). Before 1.7.0-alpha3, sequelize defaults SQLite to MySQL backslash escaping, even though SQLite uses PostgreSQL escaping, creating a SQL injection risk when Sequelize connects to SQLite. Affected: sequelize versions prior to 1.7.0-alpha3. Root cause: escap...