Malicious Package

Overview acmeheisenberg is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using acmeheisenbe...

Malicious Package

Overview acmecli is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using acmecli altogether...

PT-2020-12738

Name of the Vulnerable Software and Affected Versions EJBCA versions prior to 6.15.2.6 EJBCA versions 7.x prior to 7.3.1.2 Description An issue was discovered that allows restrictions on available remote protocols, such as CMP, ACME, and REST, to be bypassed by modifying the URI string from a...

Let's Encrypt Issued A Billion Free SSL Certificates in the Last 4 Years

Let's Encrypt, a free, automated, and open certificate signing authority CA from the nonprofit Internet Security Research Group ISRG, has said it's issued a billion certificates since its launch in 2015. The CA issued its first certificate in September 2015, before eventually reaching 100 million...

thttpd buffer overflow vulnerability

thttpd is a lightweight open source web server from ACME Labs. A buffer overflow vulnerability exists in thttpd version 2007. The vulnerability stems from a web system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

thttpd code issue vulnerability

thttpd is a lightweight open source web server from ACME Labs. A code issue vulnerability exists in thttpd, which can be exploited by an attacker to cause a denial of service with the help of a specially crafted .htpasswd file...

Netgate pfSense Stored Cross-Site Scripting (CVE-2019-12347)

A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the name and desc parameters in the acmeaccountkeysedit.php script file of the ACME package. Successful exploitation could allow the attacker to execute arbitrary script code ...

Fedora Update for mod_md FEDORA-2019-e00c65ec6f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: mod_md-2.0.8-3.fc29

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol RFC Draft to automate certificate provisioning. These will be configured for managed domains and their virtual hosts automatically. This includes renewal of certificates befor...

[SECURITY] Fedora 30 Update: mod_md-2.0.8-2.fc30

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol RFC Draft to automate certificate provisioning. These will be configured for managed domains and their virtual hosts automatically. This includes renewal of certificates befor...

Fedora Update for mod_md FEDORA-2019-099575a123

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2019-12761

Name of the Vulnerable Software and Affected Versions pfSense version 2.4.4-p3 Description A stored XSS issue occurs due to input validation errors when attackers inject a payload into the Name or Description field via an "acme accountkeys edit.php" action. Recommendations For pfSense version...

pfSense 2.4.4-p3 (ACME Package 0.59_14) - Persistent Cross-Site Scripting

pfSense 2.4.4-p3 ACME Package 0.5914 - Persistent Cross-Site Scripting Exploit Title: pfSense 2.4.4-p3 ACMEPackage 0.5.71 - Stored Cross-Site Scripting Date: 05.28.2019 Exploit Author: Chi Tran Vendor Homepage: https://www.pfsense.org Version: 2.4.4-p3/0.5.71 Software Link: N/A Google Dork: N/A...

pfSense 2.4.4-p3 (ACME Package 0.59_14) - Persistent Cross-Site Scripting

Exploit Title: pfSense 2.4.4-p3 ACMEPackage 0.5.71 - Stored Cross-Site Scripting Date: 05.28.2019 Exploit Author: Chi Tran Vendor Homepage: https://www.pfsense.org Version: 2.4.4-p3/0.5.71 Software Link: N/A Google Dork: N/A CVE:2019-12347 Introduction pfSense® software is a free, open source...

File Upload Vulnerability in Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a file upload vulnerability that can be exploited by attackers to gain server privileges...

SQL injection vulnerability in the background zh***_ed***.php page of Acme CMS

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the background zhed.php page of Acme CMS, which can be exploited by attackers to obtain sensitive...

Logic Flaw Vulnerability in Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a logic flaw vulnerability that can be exploited by attackers to forge an administrator cookie to log into the backend...

SQL Injection Vulnerability in Acme CMS Backend vi***.php

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Aike CMS background vi.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Acme CMS Backend po***_ed***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the background poed.php of Acme CMS, which can be exploited by attackers to obtain sensitive databas...

File Inclusion Vulnerability in Acme CMS

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS has a file inclusion vulnerability that can be exploited by an attacker to include any file on the server...