Code injection

Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=editsnippet&filename=google-analytics URI, which allows attackers to execute arbitrary PHP code by placing this code after a ?php substring...

CVE-2018-15886

Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=editsnippet&filename=google-analytics URI, which allows attackers to execute arbitrary PHP code by placing this code after a ?php substring...

CVE-2018-15886

Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=editsnippet&filename=google-analytics URI, which allows attackers to execute arbitrary PHP code by placing this code after a ?php substring...

Xapian xapian-core Cross-Site Scripting Vulnerability

Xapian xapian-core is a Xapian project using C++ language written in open source search engine library . A cross-site scripting vulnerability exists in the queryparser/termgeneratorinternal.cc file in Xapian xapian-core versions prior to 1.4.6, which stems from the 'Xapian::MSet::snippet' functio...

Cross-site Scripting (XSS)

Overview xapian-core is a provides Xapian libraries and Ruby bindings. Affected versions of this package are vulnerable to Cross-site Scripting XSS. A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escapi...

ALPINE-CVE-2018-0499

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet...

DEBIAN-CVE-2018-0499

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet...

CVE-2018-0499

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet...

UBUNTU-CVE-2018-0499

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet...

PT-2018-2309

Name of the Vulnerable Software and Affected Versions Xapian xapian-core versions prior to 1.4.6 Description The issue is related to insufficient protection of the web page structure in the Xapian library for full-text search. It is caused by incomplete HTML escaping by the Xapian::MSet::snippet...

GitLab: Snippet JS template allows attacker to read a user's private snippets

These days snippets can be embedded in a site other than the GitLab instance. An embed link is only generated for public snippets, as can be seen in the app/views/shared/snippets/header.html.haml: haml - if publicsnippet? .embed-snippet .input-group .input-group-btn %button.btn.embed-toggle...

CVE-2018-10319

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...

Code injection

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...

CVE-2018-10319

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippetname parameter, aka Edit Snippet...

CVE-2018-10319

Frog CMS 0.9.5 is affected by a Cross‑Site Scripting (XSS) vulnerability in the admin/?/snippet/edit (snippet[name]) parameter, i.e., the Edit Snippet action. The issue enables injection via the snippet name during edit, as documented under CVE-2018-10319. Connected records also reference the rel...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08555)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...

Chrome V8 JIT Optmization Bug Exploit

Chrome V8 JIT suffers from a simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement optimization bug. Chrome: V8: JIT: Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement optimization bug I think this commit has introduced the bugs:...

Fedora 26 : krb5 (2018-f97cb1c9b0)

Fix CVE-2018-5729, CVE-2018-5730. These are low-impact, requiring administrator access to exploit. ---- Fix leak in previous version. ---- Always read config snippets in alphabetical order per-directory. Note that Tenable Network Security has extracted the preceding description block directly fro...

CVE-2017-18092

The print snippet resource in Atlassian Crucible before version 4.4.3 the fixed version for 4.4.x and before 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the contents of a comment on the snippet...

CVE-2017-18095

The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 the fixed version 4.5.x and before 4.6.0 allows remote attackers to comment on snippets they do not have authorization to access via an improper authorization vulnerability...