CVE-2019-16725

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

PT-2019-14796

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.12 Description The issue is related to inadequate escaping, which allowed XSS attacks. Specifically, the logo parameter of the default templates was vulnerable to such attacks. Recommendations For versions prior t...

CVE-2019-16725: Improper Neutralization of Input During Web Page Generation

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

CVE-2019-14252

An issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated as an administrator, one is able to inject arbitrary PHP code by using the adminCons.php form. The code is then stored in the E:\PUBLISURE\webservice\webpages\AdminDir\Templates\ folder even if remove...

CVE-2019-14252

An issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated as an administrator, one is able to inject arbitrary PHP code by using the adminCons.php form. The code is then stored in the E:\PUBLISURE\webservice\webpages\AdminDir\Templates\ folder even if remove...

FudgeC2 - A Collaborative C2 Framework For Purple-Teaming Written In Python3, Powershell And .NET

FudgeC2 is a campaign orientated Powershell C2 framework built on Python3/Flask - Designed for team collaboration, client interaction, campaign timelining, and usage visibility. Note: FudgeC2 is currently in alpha stage, and should be used with caution in non-test environments. Setup Installation...

CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

CVE-2016-10985

The CVE-2016-10985 entry affects the WordPress EchoSign plugin (before 1.2). A reflected Cross-Site Scripting (XSS) vulnerability exists via the templates/add_templates.php id parameter. NVD records a CVSS v3.1 base score of 6.1 (NETWORK, LOW attack complexity, PR:N, UI:R, changed scope; Confiden...

CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

PT-2019-7778

Name of the Vulnerable Software and Affected Versions echosign plugin for WordPress versions prior to 1.2 Description The issue allows for XSS via the id parameter in the "templates/add templates.php" endpoint. Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve t...

CVE-2016-10985: Improper Neutralization of Input During Web Page Generation

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

Privilege Escalation

ASP.NET Core is vulnerable to privilege escalation. When an ASP.NET Core web application is created using vulnerable project templates, the application fails to properly sanitize web requests. An attacker is able to exploit the vulnerability by sending an email to the user containing a malicious...

CVE-2019-1302

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'...

CVE-2019-1302

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'...

PT-2021-8977

Name of the Vulnerable Software and Affected Versions Moodle versions 3.5 through 3.5.7 Moodle versions 3.6 through 3.6.5 Moodle versions 3.7 through 3.7.1 Description A vulnerability was found where javaScript injection was possible in some Mustache templates via recursive rendering from context...

ASP.NET Core Elevation Of Privilege Vulnerability

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests. An attacker who successfully exploited this vulnerability could perform content injection attacks and run script in the security...

PT-2019-3295

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description The issue is related to errors in processing web requests using templates. It may allow a remote attacker to elevate their privileges and perform a cross-site scripting attack by sending...

GitLab: Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requests

I've found a three minor vulnerabilities which, when combined, allow an attacker to copy private repositories, confidential issues, private snippets, and then some. I'll go through the code path to explain the vulnerabilities and how they are combined. See the Proof of Concept section if you want...

[20190901] - Core - XSS in logo parameter of default templates

Inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...