U.S. Dept Of Defense: IDOR leading unauthenticated attacker to download documents discloses PII of users and soldiers via https://www.█████████/Download.aspx?id= [HtUS]

The API endpoint at https://www.█████████/Download.aspx?id= was found to be vulnerable to Insecure Direct Object Reference IDOR, allowing an unauthenticated attacker to download sensitive documents containing PII of users and soldiers...

GHSA-JPP7-7CHH-CF67 Cross site scripting in parse-url

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

Log value insertion in craftercms

An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator...

GHSA-4VC9-4XPQ-77VM Cobbler Arbitrary File Read

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation...

Jspxcms 代码问题漏洞

Blue Intelligence Technology Jspxcms is China's Blue Intelligence Technology Company's set of scalable enterprise-class open source Web content management system CMS. Jspxcms version 10.2.0 has a security vulnerability , the vulnerability stems from the /cmscp/ext/collect/fetchurl.do?url=found th...

GHSA-WFJ7-MHR5-PCWQ Apache Tomcat Reveals Directories

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon ; preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do...

CVE-2022-1067

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting...

Apache Airflow 跨站脚本漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from a cross-site scripting vulnerability that stems from...

Nasa Open Mct 跨站脚本漏洞

Nasa Open Mct is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A cross-site scripting vulnerability exists in Nasa Open mct versions 1.3.0 through 1.7.7, which stems from a lack of valid filtering and escaping of Web Page...

Mageia: Security Advisory (MGASA-2019-0251)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-23221

H2Database/H2 Console, affected version before 2.1.210, is vulnerable to remote code execution via a crafted JDBC URL in the H2 Console. The vulnerability is triggered by a substring in the URL jdbc:h2:mem with IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT, enabling arbitrary ...

CVE-2021-45018

Catfish CMS (versions up to 6.3.0) is affected by a Cross-Site Scripting (XSS) vulnerability. The CVE description notes the issue can be triggered via a Google search path involving url:/catfishcms/index.php/admin/Index/addmenu.html and the following .html file, within the affected editor context...

CVE-2021-25521

CVE-2021-25521 affects Samsung Internet prior to version 16.0.2. The issue is an insecure check in the sharevia deeplink logic, enabling untrusted applications to obtain the user’s current tab URL in Samsung Internet. This is a local issue tied to the deeplink handling, with impact limited to con...

CVE-2021-41120

CVE-2021-41120 affects the Sylius PayPal plugin. In affected versions, the payment-page URL used after checkout was predictable due to an autoincremented payment id in the path (/pay-with-paypal/{id}). The credit card form prefilled the cardholder name with the customer’s first and last name and ...

Cross-site Scripting (XSS) - Reflected in pheditor/pheditor

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into websites. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execut...

UBUNTU-CVE-2021-22243

Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group...

CVE-2021-21799

Advantech R-SeeNet 2.4.12 is affected by a reflected XSS in telnet_form.php. The issue arises from improper input handling in telnet_form.php, enabling arbitrary script execution in the victim’s browser when a crafted URL is visited. Nuclei templates describe the vulnerability as a reflected XSS;...

CVE-2021-24002

When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

@dylanlindgren/storybook-addon-sn-next-ui (>=0.1.0 <=1.0.0), @github1/ajax-service (>=0.4.0-next.0 <=0.4.44) +48 more potentially affected by CVE-2021-33502 via normalize-url (>=4.3.0 <=4.5.0)

normalize-url NPM version =4.3.0, =0.1.0, =0.4.0-next.0, =0.4.39-next.0, =5.1.0, =5.7.5 - @plaa/metascraper =5.4.0 - @plaa/metascraper-amazon =5.4.0 - @plaa/metascraper-audio =5.4.0 - @plaa/metascraper-author =5.4.0 - @plaa/metascraper-date =5.4.0 - @plaa/metascraper-description =5.4.0 -...

Regular Expression Denial Of Service (ReDoS)

normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string...