Debian DLA-1550-1 : drupal7 security update

It was discovered that there was a remote code execution and an external URL injection vulnerability in the Drupal content management framework. For more information, please see : https://www.drupal.org/sa-core-2018-006 For Debian 8 'Jessie', these issues have been fixed in drupal7 version...

Debian: Security Advisory (DLA-1550-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1550-1] drupal7 security update

Package : drupal7 Version : 7.32-1+deb8u13 Debian Bugs : 911336 911337 It was discovered that there was a remote code execution and an external URL injection vulnerability in the Drupal content management framework. For more information, please see: https://www.drupal.org/sa-core-2018-006 For...

Drupal Core - Multiple Vulnerabilities - SA-CORE-2018-006

Content moderation - Moderately critical - Access bypass - Drupal 8 In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass. In order to fix this issue, the following changes have been made to content moderation which may have...

marinazz.com XSS vulnerability

Open Bug Bounty ID: OBB-667882 Description| Value ---|--- Affected Website:| marinazz.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

1xbet32.com XSS vulnerability

Open Bug Bounty ID: OBB-667197 Description| Value ---|--- Affected Website:| 1xbet32.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

estahome.nl XSS vulnerability

Open Bug Bounty ID: OBB-656002 Description| Value ---|--- Affected Website:| estahome.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HTTP Header Injection

sanic is vulnerable to HTTP header inject attacks. The vulnerability exists due to the lack of sanitization of the URL field, allowing arbitrary header injection...

SUSE-SU-2018:1489-1 Security update for bzr

Bzr was updated to fix a security issue: - CVE-2017-14176: Avoid code execution using ssh:// url injection boo1058214...

UBUNTU-CVE-2016-10531

marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content injection protection sanitize: true to inject a javascript: URL. This flaw exists because...

Debian DLA-1384-1 : xdg-utils security update

It was found that the openenvvar function in xdg-utils does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. For Debian 7 'Wheezy', these problems have been...

myhealth.umassmemorial.org XSS vulnerability

Open Bug Bounty ID: OBB-623783 Description| Value ---|--- Affected Website:| myhealth.umassmemorial.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| StayWell Solutions Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

butterflyleahin.com XSS vulnerability

Open Bug Bounty ID: OBB-622207 Description| Value ---|--- Affected Website:| butterflyleahin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jewishhistory.org.il XSS vulnerability

Open Bug Bounty ID: OBB-621454 Description| Value ---|--- Affected Website:| jewishhistory.org.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

noithatnhapkhau.net.vn XSS vulnerability

Open Bug Bounty ID: OBB-596922 Description| Value ---|--- Affected Website:| noithatnhapkhau.net.vn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

matvdirect.vivaprix.com XSS vulnerability

Open Bug Bounty ID: OBB-586152 Description| Value ---|--- Affected Website:| matvdirect.vivaprix.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

phpMyAdmin db_central_columns.php cross-site scripting vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in the...

batemanps.wa.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-563946 Description| Value ---|--- Affected Website:| batemanps.wa.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

tw.sasa.com XSS vulnerability

Open Bug Bounty ID: OBB-545885 Description| Value ---|--- Affected Website:| tw.sasa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...