CVE-2022-31541: Improper Limitation of a Pathname to a Restricted Directory

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Barry-Voice-Assistant 路径遍历漏洞

Barry-Voice-Assistant is a voice assistant from the Bulgarian personal developer Lyuboslav Karev. Barry-Voice-Assistant 2021-01-18 and earlier versions have a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resource or...

web.barry-callebaut.com Cross Site Scripting vulnerability OBB-1297867

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WordPress Appointments plugin <=2.2.1 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability found by Matt Barry WordFence in WordPress Appointments plugin versions =2.2.1. Solution Update the WordPress Appointments plugin to the latest available version at least 2.2.2...

WordPress Flickr Gallery plugin <=1.5.2 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability found by Matt Barry WordFence in WordPress Appointments plugin versions =1.5.2. Solution Update the WordPress Flickr Gallery plugin to the latest available version at least 1.5.3...

barry-today.co.uk XSS vulnerability

Vulnerable URL: http://www.barry-today.co.uk//search.cfm?sectionIs=search=Local News=2011="--!"= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2868619 VIP website status:| No...

barrytowncouncil.gov.uk XSS vulnerability

Vulnerable URL: http://www.barrytowncouncil.gov.uk/history.php?Action=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9758855 VIP website status:| No Check barrytowncouncil.gov.uk...

HULK - Web Server DoS Tool

HULK is a web server denial of service tool DDoS Tool written for research purposes. It is designed to generate volumes of unique and obfuscated traffic at a webserver, bypassing caching engines and therefore hitting the server's direct resource pool. The Hulk Web server is a brainchild of Barry...

SA-CONTRIB 2010-075 - Tagging - Cross Site Scripting

The Tagging module provides an alternative input widget and other features for taxonomy terms. The module does not properly escape user-provided content submitted to free-tagging vocabularies displayed on node previews, leading to a Cross Site Scripting XSS vulnerability. Any user with permission...

Biden-Threat Suspect Faces Long Jail Time

Barry Ardolf, 45, of Blaine, Minnesota, had rejected a plea deal in connection to charges accusing him of sending Vice President Joe Biden a threatening e-mail from his neighbor’s computer, a computer he is accused of hacking. A federal grand jury substantially upped the ante against the computer...

Cross site scripting

Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...

CVE-2007-1028

Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...

CVE-2007-1028

Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...

CVE-2007-1028

CVE-2007-1028 is an XSS vulnerability in the Drupal module Barry Jaspan Image Pager (versions 4.7.x-1.x-dev and 5.x-1.x-dev prior to 2007-02-08). Remote attackers can inject arbitrary web script or HTML via vectors related to HTML entities and the IMG element. The exact exploitation vectors are n...

CVE-2007-1028: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...

CVE-2006-5429

CVE-2006-5429 affects Barry Nauta BRIM 1.2.1 and earlier. The vulnerability is a PHP remote file inclusion in the template.tpl.php renderer parameter across multiple templates (barrel, sidebar, text-only, slashdot, penguin, pda, oerdec, nifty, mylook, barry). The root cause is improper handling o...

CVE-2006-5414

CVE-2006-5414 affects Barry Nauta BRIM before 1.2.1. Affected component: BRIM application; root cause: insecure handling of URLs allows remote authenticated users to read information from other users by modifying the URL, leading to information disclosure. Impact is partial confidentiality breach...

CVE-2006-5429: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in 1 templates/barrel/, 2 templates/sidebar/, 3 templates/text-only, 4 templates/slashdot/, 5...

CVE-2006-5414: Undefined Security Weakness

Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL...

Moderate: Red Hat Security Advisory: mailman security update

Updated mailman packages that fix security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found in the w...