Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the src tag. An attacker can read arbitrary files from the server's file system. Remediation Upgrade tecnickcom/tcpdf to version 6.7.6 or higher. References - GitHub Commit Credit:...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2019-34772)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Microsoft SharePoint Input Validation Error Vulnerability (CNVD-2019-39027)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

SUSE-SU-2018:1441-1 Security update for libmodplug

This update for libmodplug fixes the following issues: - Update to version 0.8.9.0+git20170610.f6dd59a bsc1022032: PSM: add missing line to commit ABC: prevent possible increment of p past end ABC: ensure read pointer is valid before incrementing ABC: terminate early when things don't work in...

Capture: HTTP JavaScript Keylogger

This modules runs a web server that demonstrates keystroke logging through JavaScript. The DEMO option can be set to enable a page that demonstrates this technique. Future improvements will allow for a configurable template to be used with this module. To use this module with an existing web page...