CVE-2019-1003067: Missing Encryption of Sensitive Data

Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

trac-publisher-plugin stores credentials in plain text

trac-publisher-plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

trac-fund.com XSS vulnerability

Open Bug Bounty ID: OBB-452924 Description| Value ---|--- Affected Website:| trac-fund.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Nextcloud: Lost Password CSRF

Hi, I think it is something about your Wordpress version.It's not something highy risky bu it is vulnerability. CODE: Username or Email For testing CSRF I added the .html file to attachments.And there is a screenshot for you. How To Fix : Adding rpkey will be fine. Please take a look at links bel...

[SECURITY] Fedora 21 Update: libreport-2.3.0-10.fc21

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

[SECURITY] Fedora 23 Update: libreport-2.6.3-1.fc23

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

[SECURITY] Fedora 22 Update: libreport-2.6.3-1.fc22

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

[SECURITY] Fedora 21 Update: libreport-2.3.0-8.fc21

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

[SECURITY] Fedora 22 Update: libreport-2.6.0-1.fc22

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities in the trac-git package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Wordpress MailPoet (wysija-newsletters) Unauthenticated File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress MailPoet wysija-newsletters Unauthenticated File Upload', 'Description' = %q The Wordpress plugin "MailPoet Newsletters"...

Edgewall Software Trac 0.9 Ticket Query Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15676/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result ...

Edgewall Software Trac 0.7.1/0.8/0.9 Search Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15720/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow a...

CentOS Update for libreport CESA-2013:0215 centos6

Check for the Version of libreport OpenVAS Vulnerability Test CentOS Update for libreport CESA-2013:0215 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libreport CESA-2013:0215 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-4668

Cross-site scripting XSS vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email...

Fedora Update for libreport FEDORA-2011-16990

Check for the Version of libreport OpenVAS Vulnerability Test Fedora Update for libreport FEDORA-2011-16990 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 16 Update: libreport-2.0.8-3.fc16

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

Fedora 12 : trac-0.11.7-1.fc12 (2010-4318)

Update to upstream version 0.11.7, fixing one security flaw and multiple bugs. Refer to upstream changelog for further details: http://trac.edgewall.org/wiki/ChangeLoga0.11.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...