13585 matches found
CVE-2015-3649: Improper Input Validation
The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created...
PT-2017-6689
Name of the Vulnerable Software and Affected Versions open-uri-cached rubygem affected versions not specified Description The issue allows local users to execute arbitrary Ruby code. This is achieved by creating a directory under /tmp with a specific name, including "openuri-" followed by a craft...
Nextcloud: Stored XSS in OAuth redirect URI
An admin could inject a stored XSS in the OAuth redirect URI...
X (Formerly Twitter): [dev.twitter.com] XSS and Open Redirect
Description === XSS via Request-URI which requires user interaction. The vulnerability is caused by the difference in the Request-URI processing in the Location header and in the link on the page. By creating an incorrect port in the link on the Location header, you can block the redirection for...
Internet Bug Bounty: RCE via ssh:// URIs in multiple VCS
I'd like to submit an RCE issue within Git SVN and Mercurial, the CVEs are: CVE-2017-9800 Subversion CVE-2017-1000116 Mercurial hg CVE-2017-1000117 Git Further Info can be found at: http://blog.recurity-labs.com/2017-08-10/scm-vulns And product specific:...
Server side request forgery (ssrf)
Server-side request forgery SSRF vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI...
CVE-2017-11149
Server-side request forgery SSRF vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI...
Mail.ru: Отраженная XSS на cloud.mail.ru в URL в функционале создания и редактировании презентации.
Reflected URI-based XSS via crafted name of new PowerPoint document in presentation editor...
CVE-2017-12413
Axis 2100 Network Camera, version 2.43, is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the URI. The root cause, as documented across multiple sources, is that the value from the URL path filename is echoed into the HTML response without proper sanitization, enabling a r...
CVE-2017-12413: Improper Neutralization of Input During Web Page Generation
AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...
PT-2017-12542
Name of the Vulnerable Software and Affected Versions AXIS 2100 devices version 2.43 Description The issue is related to a XSS vulnerability via the URI, possibly related to admin/admin.shtml. Recommendations For version 2.43, update the firmware to a version that addresses this issue, or as a...
Tor: Linux TBB SFTP URI allows local IP disclosure
Browsing to a simple URL to an sftp URI allows bypasses socks proxy for DNS and browsing. Tested on a clean install of Ubuntu 16.04 with TBB 7.0.2 4097d43aa0be86ae3fe43ec8f3ac5394 download from https://www.torproject.org/dist/torbrowser/7.0.2/tor-browser-linux64-7.0.2en-US.tar.xz POC: Navigate to...
Directory traversal
On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI...
CVE-2017-11517
Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request...
CVE-2017-11517
CVE-2017-11517 affects Geutebrueck Gcore/GCoreServer.exe in Geutebrueck Gcore server versions 1.3.8.42 and 1.4.2.37. It is a stack-based buffer overflow triggered by a long URI in a GET request, allowing remote code execution. Public sources confirm the vulnerability and affected versions; a publ...
CVE-2017-11517
Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request...
CVE-2017-11517: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request...
Cross-site Scripting
plotly-js is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due the lack of URI encoding in the href field that defines the special popup attribute...
