PT-2020-12872 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.6 Description: A stored XSS issue exists in the admin tools -- audit page when the USER LOGIN FAILED feature is active. This could potentially allow for the theft of an admin account. Recommendations: For Dolibarr versio...

CVE-2020-1002

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'...

ZSQL: Audit Level

Audit logs are important in tracing data, locating faults, and clarifying responsibilities after security events occur. Database audit is configured by setting the AUDITLEVEL parameter. AUDITLEVEL = 0 disables audit logs. If AUDITLEVEL is set to a value greater than 0, audit logs are enabled, and...

Information Disclosure

modperl is vulnerable to information disclosure. It was discovered that Red Hat Network Satellite Server shipped with an XML-RPC script, manzier.pxt, which had a single hard-coded authentication key. A remote attacker who is able to connect to the Satellite Server XML-RPC service could use this...

Zen Load Balancer 3.10.1 Remote Code Execution

c@kali:/src/eonila/zenload3r$ cat zenload3r.py !/usr/bin/env python zenload3r.py - zen load balancer pwn3r 28.03.2020 @ 22:41 by cody sixteen import base64 import sys, re import requests import ssl from functools import partial ssl.wrapsocket = partialssl.wrapsocket, sslversion=ssl.PROTOCOLTLSv1...

UPM doesn't work randomly after VDA is rebooted

Intermittently UPM profile does not load, if user login immediately after the reboot...

Nuri: HTML injection in email content

Summary: Hi, I just found an issue when register account in https://app.bitwala.com/onboarding/preliminary. It allow hacker injection malicious text include html code in email content. Steps To Reproduce: Make request register below with payload html in ==firstName== and ==lastName== parameter:...

Temporary User Profiles Received Instead of Citrix Profile Management Profiles

Citrix Profile Management has been installed and configured in the environment. A Citrix Profile Management Store has been setup for the users where their profiles should be stored. When a user logs in they are receiving a temporary windows user profile instead of a Citrix Profile Management...

Ltd. happy city localized e-commerce APP has logic flaws vulnerability

Happy Merchant App is a store management software that serves merchant users. There is a logic flaw vulnerability in the Happy City localized e-commerce APP of Jiangsu Patrol Network Technology Co. Attackers can utilize the vulnerability to log in to the system with any user including the merchan...

CVE-2019-18350

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

Authorization

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

CVE-2019-18350

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

CVE-2019-18350

In Ant Design Pro 4.0.0, a reflected XSS in the user/login redirect GET parameter affects the authorization component, allowing execution of JavaScript in the login after-action script. Red Hat and other linked sources confirm the same issue exists across vendors; the vulnerability is tied to the...

WordPress ThemeMakers Almera Responsive Portfolio Site Template Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Almera Responsive Portfolio Site Template is one of the responsive website theme plugins used in it. WordPress...

WordPress ThemeMakers Axioma Premium Responsive theme Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Axioma Premium Responsive theme is a responsive website theme plugin used in it. WordPress ThemeMakers Axioma...

WordPress ThemeMakers Accio Responsive Parallax One Page Site Template Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Accio Responsive Parallax One Page Site Template is a responsive one page parallax effect website theme plugin...

WordPress ThemeMakers Invento Responsive Gallery/Architecture Template Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ThemeMakers Invento Responsive Gallery/Architecture Template is a responsive gallery plugin used in... WordPress ThemeMakers Invento...

WordPress ThemeMakers Diplomat|Political theme information leakage vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ThemeMakers Diplomat|Political theme is a theme plugin for diplomatic and political websites. WordPress ThemeMakers Diplomat|Political...

WordPress ThemeMakers Almera Responsive Portfolio theme Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Almera Responsive Portfolio theme is one of the responsive website theme plugins used in it. WordPress ThemeMake...

WordPress ThemeMakers Car Dealer / Auto Dealer Responsive theme Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Car Dealer / Auto Dealer Responsive theme is one of the car sales website theme plugins used in it. WordPress...