58 matches found
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
Design/Logic Flaw
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
UBUNTU-CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
GitLab Information Disclosure Vulnerability (CNVD-2020-58041)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
PT-2020-13464 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1 Description: A vulnerability was discovered that allows private merge requests to be read via Todos under certain conditions. Recommendations: For versions prior to 13.1, update to version 13.1 or later to resolv...
SAIA (Software Gestion Documental) SQL Injection & XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: SAIA Software Gestion Documental SQL Injection & XSS Vulnerability D0rk: intext:"Todos los derechos reservados CERO K" Exploit Author: n4pst3r Vendor Homepage: https://www.cerok.co/ Tested on: Windows 10, Debian 9 ...
GitLab Access Control Error Vulnerability (CNVD-2020-01240)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab suffers from an access control error vulnerability...
FreeBSD : Gitlab -- Multiple Vulnerabilities (1aa7a094-1147-11ea-b537-001b217b3468)
Gitlab reports : Path traversal with potential remote code execution Private objects exposed through project import Disclosure of notes via Elasticsearch integration Disclosure of comments via Elasticsearch integration DNS Rebind SSRF in various chat notifications Disclosure of vulnerability stat...
Msploitego - Pentesting Suite For Maltego Based On Data In A Metasploit Database
msploitego leverages the data gathered in a Metasploit database by enumerating and creating specific entities for services. Services like samba, smtp, snmp, http have transforms to enumerate even further. Entities can either be loaded from a Metasploit XML file or taken directly from the Postgres...
[SECURITY] Fedora 17 Update: kdepim-4.8.4-4.fc17
KDE PIM Personal Information Manager applications, including: akregator: feed aggregator blogilo: blogging application, focused on simplicity and usability kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal,...
CVE-2011-1671
Cross-site scripting XSS vulnerability in app/controllers/todoscontroller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to todos/tag/. NOTE: some of these details are obtained from third party information...
Fedora Update for kdepim FEDORA-2010-8544
Check for the Version of kdepim OpenVAS Vulnerability Test Fedora Update for kdepim FEDORA-2010-8544 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for kdepim FEDORA-2007-2985
Check for the Version of kdepim OpenVAS Vulnerability Test Fedora Update for kdepim FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2005-1737
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to 1 view or modify the project member list or 2 modify the todos list...
CVE-2005-1737
CVE-2005-1737 affects PROMS 0.11, where multiple unknown vulnerabilities allow non-authorized users to view or modify the project member list and to modify the todos list. The connected documents do not provide explicit root cause, affected versions beyond 0.11, or remediation details. No in‑the‑...