CVE-2009-20007

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/talkativeresponse.rb 2025-09-16 18:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxvzwyqae2j 2025-10-23...

CVE-2017-16780

creationtimestamp| type| source ---|---|--- 2017-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43136...

CVE-2017-8479

creationtimestamp| type| source ---|---|--- 2017-06-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42232...

Yocto Project Information Disclosure Vulnerability

Yocto project is an open source collaboration project . An information disclosure vulnerability exists in Yocto Project. An attacker can obtain sensitive information by reading the URL in the Source entry in an ipk package...

CVE-2017-9731

In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...

CVE-2017-6862

creationtimestamp| type| source ---|---|--- 2017-05-11 18:16:06+00:00| seen| https://t.me/webamoozir/1752 2022-06-08 19:35:04+00:00| published-proof-of-concept| https://t.me/truesecator/3042 2022-06-13 12:33:51+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:03+00:00| seen...

CVE-2016-8583

creationtimestamp| type| source ---|---|--- 2016-11-02 00:40:30+00:00| published-proof-of-concept| https://t.me/FullDisclosure/221...

CVE-2016-7981

creationtimestamp| type| source ---|---|--- 2016-10-19 20:44:12+00:00| published-proof-of-concept| https://t.me/FullDisclosure/177...

CVE-2016-5149: Improper Control of Generation of Code

The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a...

PT-2016-6269

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.89 on Windows and OS X Google Chrome versions prior to 53.0.2785.92 on Linux Opera affected versions not specified Description The issue arises from the extensions subsystem relying on an IFRAME source...

CVE-2015-5546

creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37868...

CVE-2015-4117

creationtimestamp| type| source ---|---|--- 2015-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37369...

CVE-2014-8612

creationtimestamp| type| source ---|---|--- 2015-01-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35938...

PHPSlash 0.5.3 2/0.6.1 URL Block Arbitrary File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2724/info PHPSlash is a widely used open source Groupware utility. PHPSlash contains a vulnerability which may disclose files readable to the webserver process on the underlying host to PHPSlash users who can 'edit' URL...

Design/Logic Flaw

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

CVE-2014-3496

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

CVE-2014-3496: Improper Control of Generation of Code

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

PT-2014-5359 · Red Hat · Openshift Origin +1

Name of the Vulnerable Software and Affected Versions: OpenShift Origin and Enterprise versions 1.2.8 through 2.1.1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with certain file extensions in a cartridge manifest fil...

Origin: Command execution as root via downloadable cartridge source-url

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

Origin: Command execution as root via downloadable cartridge source-url

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...