EUVD-2018-9946

Malware in sbrugna...

EUVD-2011-3167

Malware in sbrugna...

EUVD-1999-1031

Malware in sbrugna...

EUVD-2018-7539

Malware in sbrugna...

EUVD-2023-41886

Malicious code in bioql PyPI...

CVE-2024-27731

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...

CVE-2024-27731

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...

CVE-2024-27731

A Cross Site Scripting (XSS) vulnerability exists in Friendica v.2023.12 due to a lack of file type filtering in the file attachment parameter . This flaw allows a remote attacker to obtain sensitive information . To mitigate this risk, it is recommended to restrict the types of files that can be...

CVE-2020-13239

The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS...

UBUNTU-CVE-2020-13239

The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS...

PT-2020-13389 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 11.0.4 Description: The issue concerns the DMS/ECM module, which renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link, leading to a Cross-Site Scripting XSS...

CVE-2020-13239: Improper Neutralization of Input During Web Page Generation

The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS...

CVE-2011-3203

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...

Remote code execution

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...

CVE-2011-3203

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...

CVE-2011-3203: Improper Input Validation

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...

SQL Injection Vulnerability in the Backend of Armitage Website Management System

Jingxun CMS is a website construction and management system by Taizhou Jingxun Information Technology Co. A SQL injection vulnerability exists in the backend of the 2.1 Simplified Chinese version of the Armitage CMS, due to the system not filtering the $attachment parameter. This vulnerability...

DEBIAN-CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...

CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...

CVE-2011-3201: Exposure of Sensitive Information to an Unauthorized Actor

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...