Splunk Cloud Platform和Splunk Enterprise 信息泄露漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An information disclosure vulnerability exists...

CVE-2022-1811

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

PT-2022-14131 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify versions prior to 9.2.9 Description: The issue allows for the unrestricted upload of files with dangerous types. This can be exploited to manipulate requests and bypass protections, potentially leading to stored XSS attacks...