Atlasian Atlasboard 路径遍历漏洞

Atlasian Atlasboard is a dashboard framework written in nodejs. A path traversal vulnerability exists in Atlasian Atlasboard that stems from the renderWidgetResource resource in the product failing to properly filter for special elements in the path of a resource or file. An attacker could use th...

DEBIAN-CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...