com.nimbusds:oidc-session-store (>=1.2.2, <=1.3.1), org.efaps.apps:console (3.2.0) +41 more potentially affected by CVE-2019-10174 via org.infinispan:infinispan-core (7.0.2.final)

org.infinispan:infinispan-core MAVEN version 7.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.nimbusds:oidc-session-store =1.2.2, =1.17.0, =1.18.0-7.4.3.v20110701, =5.0.0.cr2,...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.3.0-rc3)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.0-rc3)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves:...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (5.3.1) +158 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.1)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 -...

org.opencms:opencms-webapp (8.0.2) potentially affected by CVE-2019-11819 via org.opencms:opencms-core (8.0.2)

org.opencms:opencms-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.2 Source cves: CVE-2019-11819 Source advisory: OSV:GHSA-Q693-V7QF-P4XJ...

org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2019-11819 via org.opencms:opencms-core (8.0.4)

org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2019-11819 Source advisory: OSV:GHSA-Q693-V7QF-P4XJ...

de.eonas.portal:opencmsinstaller (8.5.1.1), de.eonas.portal:opencmsportaldriver (>=8.5.1.1, <=9.0.0.7) +12 more potentially affected by CVE-2019-11819 via org.opencms:opencms-core (8.5.1)

org.opencms:opencms-core MAVEN version 8.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 8.5.1.1 - de.eonas.portal:opencmsportaldriver =8.5.1.1, =9.0.0.7 -...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a resource management error vulnerability that stems from a post-release reuse issue in WebApp Installs. A remote attacker can trick a victim into visiting a specially crafted web pa...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 32 security fixes, including: 1324864 Critical CVE-2022-1853: Use after free in Indexed DB. Reported by Anonymous on 2022-05-12 1320024 High CVE-2022-1854: Use after free in ANGLE. Reported by SeongHwan Park SeHwa on 2022-04-27 1228661 High...

PT-2022-2696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Description The issue is related to a use after free in WebApp Installs, which could allow an attacker to potentially exploit heap corruption via a crafted Chrome Extension and specific user...

org.apache.polygene.extensions:org.apache.polygene.extension.indexing-solr (3.0.0), org.apache.solr.solr:solr-clustering (1.4.1) +7 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (1.4.1)

org.apache.solr:solr-core MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.polygene.extensions:org.apache.polygene.extension.indexing-solr 3.0.0 -...

de.pfabulist.lindwurm:niodav (>=0.2.4, <=0.4.2), de.pfabulist.lindwurm:stellvertreter-app (0.5.2) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.10.0, <=2.10.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.10.0, =0.2.4, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.3 Source cves: CVE-2016-6801 Source advisory: GHSA-9FC7-RHQ3-WM7X...

org.apache.archiva:archiva-webapp (>=1.4-m4, <=2.0.1), org.apache.archiva:archiva-webdav (>=1.4-m4, <=2.0.1) +13 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.6.0, <=2.6.5)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.6.0, =1.4-m4, =1.4-m4, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =1.2.2, =2.2.2, =1.3.0-beta3, =1.0.0-beta1, =1.2.0-cr9, =1.3.0-beta2 Source cves: CVE-2016-6801 Source advisory: OSV:GHSA-9FC7-RHQ3-WM7X...

org.apache.jackrabbit:jackrabbit-bundle (>=2.12.0, <=2.12.3), org.apache.jackrabbit:jackrabbit-jcr-server (>=2.12.0, <=2.12.3) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.12.0, <=2.12.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =1.3.2, =1.3.4 - org.apache.sling:org.apache.sling.jcr.webdav 2.3.4 Source cves: CVE-2016-6801 Source advisory: GHSA-9FC7-RHQ3-WM7X...

org.apache.jackrabbit:jackrabbit-bundle (>=2.12.0, <=2.12.3), org.apache.jackrabbit:jackrabbit-jcr-server (>=2.12.0, <=2.12.3) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.12.0, <=2.12.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =1.3.2, =1.3.4 - org.apache.sling:org.apache.sling.jcr.webdav 2.3.4 Source cves: CVE-2016-6801 Source advisory: OSV:GHSA-9FC7-RHQ3-WM7X...

org.apache.archiva:archiva-webapp (>=1.4-m4, <=2.0.1), org.apache.archiva:archiva-webdav (>=1.4-m4, <=2.0.1) +13 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.6.0, <=2.6.5)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.6.0, =1.4-m4, =1.4-m4, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =1.2.2, =2.2.2, =1.3.0-beta3, =1.0.0-beta1, =1.2.0-cr9, =1.3.0-beta2 Source cves: CVE-2016-6801 Source advisory: GHSA-9FC7-RHQ3-WM7X...

de.pfabulist.lindwurm:niodav (>=0.2.4, <=0.4.2), de.pfabulist.lindwurm:stellvertreter-app (0.5.2) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.10.0, <=2.10.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.10.0, =0.2.4, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.3 Source cves: CVE-2016-6801 Source advisory: OSV:GHSA-9FC7-RHQ3-WM7X...

Path Traversal in Apache Atlas

Apache Atlas versions 0.6.0 incubating, 0.7.0 incubating, and 0.7.1 incubating allow access to the webapp directory contents by pointing to URIs like /js and /img...

GHSA-M2RR-H6G4-9CM9 Path Traversal in Apache Atlas

Apache Atlas versions 0.6.0 incubating, 0.7.0 incubating, and 0.7.1 incubating allow access to the webapp directory contents by pointing to URIs like /js and /img...

T-Soft E-Commerce 4 - SQL injection (Authenticated) Vulnerability

Exploit Title: T-Soft E-Commerce 4 - SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE: 2022-28132 Description Step-1: Login as Admin or with privilage use...