229 matches found
[SECURITY] Fedora 37 Update: php-symfony4-4.4.50-1.fc37
Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...
Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL
The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access to Kubernetes environments. A second initial access vector technique entails the use of vulnerable images, Sunders Bruskin, security...
PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting
Cross-site scripting XSS vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
GHSA-C5X3-GQ36-PRRP PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting
Cross-site scripting XSS vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Code Injection in PHPUnit
Util/PHP/eval-stdin.php in PHPUnit starting with 4.8.19 and before 4.8.28, as well as 5.x before 5.6.3, allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a ?php substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external...
GHSA-R7C9-C69M-RPH8 Code Injection in PHPUnit
Util/PHP/eval-stdin.php in PHPUnit starting with 4.8.19 and before 4.8.28, as well as 5.x before 5.6.3, allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a ?php substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external...
PHPUnit Command Injection Vulnerability
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI...
[SECURITY] Fedora 34 Update: php-symfony4-4.4.35-1.fc34
Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...
Exploit for Code Injection in Phpunit_Project Phpunit
laravel phpunit rce masscanner CVE-2017-9841 Masscanner for La...
Exploit for Code Injection in Phpunit_Project Phpunit
laravel phpunit rce masscanner CVE-2017-9841 Masscanner for La...
Exploit for Code Injection in Phpunit_Project Phpunit
laravel phpunit rce masscanner CVE-2017-9841 Masscanner for La...
Exploit for Code Injection in Phpunit_Project Phpunit
laravel phpunit rce masscanner CVE-2017-9841 Masscanner for La...
Exploit for Code Injection in Phpunit_Project Phpunit
laravel phpunit rce masscanner CVE-2017-9841 Masscanner for La...
[SECURITY] Fedora 34 Update: php-symfony4-4.4.24-1.fc34
Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...
[SECURITY] Fedora 33 Update: php-symfony4-4.4.24-1.fc33
Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...
[SECURITY] Fedora 33 Update: php-symfony3-3.4.49-1.fc33
Symfony PHP framework version 3. NOTE: Does not require PHPUnit bridge...
VulnCheck KEV: CVE-2017-9841
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI...
openSUSE Security Update : nextcloud (openSUSE-2020-1652)
This update for nextcloud fixes the following issues : nextcloud version 20.0.0 fix some security issues : - NC-SA-2020-037 PIN for passwordless WebAuthm is asked for but not verified - NC-SA-2020-033 CVE-2020-8228 Missing rate limit on signup page - NC-SA-2020-029 CVE-2020-8233, boo1177346...
Security update for nextcloud (moderate)
openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2020:1652-1 Rating: moderate References: 1171572 1171579 1177346 Cross-References: CVE-2020-8154 CVE-2020-8155 CVE-2020-8183 CVE-2020-8228 CVE-2020-8233 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1...