5000 matches found
USN-3243-1: Git vulnerability
It was discovered that Git incorrectly sanitized branch names in the PS1 variable when configured to display the repository status in the shell prompt. If a user were tricked into exploring a malicious repository, a remote attacker could use this issue to execute arbitrary code...
Git Arbitrary Code Execution Vulnerability (CNVD-2017-03446)
Git is a free, open source distributed version control system developed by American software developer Linus Torvalds Linus Torvalds. A security vulnerability exists in the contrib/completion/git-prompt.sh file in versions of Git prior to 1.9.3, which stems from the program failing to filter the...
UBUNTU-CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
Moderate: Red Hat Security Advisory: redhat-virtualization-host security and bug fix update
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for RHEV 4.X, RHEV-H, and Agents for RHEL-7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...
Mozilla Firefox Denial of Service Vulnerability (CNVD-2017-04191)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. A denial of service vulnerability exists in Mozilla Firefox, which can be exploited by an attacker to repeatedly trigger a...
Privilege escalation
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts of SysInfo require setuid-to-root access in order to access restricted system files and make restricted kernel calls. This...
CVE-2017-6516
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts of SysInfo require setuid-to-root access in order to access restricted system files and make restricted kernel calls. This...
CVE-2017-5419
If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service DOS attack. This vulnerability affects Firefox 52 and Thunderbird 52...
CVE-2016-7601
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...
operadorabanklot.com XSS vulnerability
Vulnerable URL:...
Design/Logic Flaw
IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed...
CVE-2016-5918
IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed...
WordPress Exploit Framework
WordPress Exploit Framework is a Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems. Requirements Ensure that you have Ruby 2.2.x installed on your system and then install all required dependencies by opening a command...
telunjuk.com XSS vulnerability
Vulnerable URL: https://www.telunjuk.com/jual?isdiscounti=1=+amp+=2prompt/OPENBUGBOUNTY/...
iqtest.freenet.de XSS vulnerability
Vulnerable URL: http://iqtest.freenet.de/html/trainer.php?myAction=showQuestion'"--!prompt/OPENBUGBOUNTY/...
Cross site scripting
Cross-site scripting XSS vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names...
CVE-2017-5515
Cross-site scripting XSS vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names...
CVE-2017-5515: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names...
mycollingwood.ca XSS vulnerability
Open Bug Bounty ID: OBB-203457 Description| Value ---|--- Affected Website:| mycollingwood.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...