74 matches found
UBUNTU-CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
PT-2020-9195 · Pagure +1 · Pagure +1
Name of the Vulnerable Software and Affected Versions: Pagure versions prior to 5.6 Description: The issue allows for XSS via the templates/blame.html blame view. Recommendations: For versions prior to 5.6, update to version 5.6 or later to resolve the issue...
PT-2020-17233 · Python +4 · Py +4
Name of the Vulnerable Software and Affected Versions: py versions through 1.9.0 Description: A denial of service via regular expression in the py.path.svnwc component could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame...
Developer permanently deletes 3 months of work files; blames Visual Studio Code
By Waqas In our professional lives, stuff happens like this man who a few This is a post from HackRead.com Read the original post: Developer permanently deletes 3 months of work files; blames Visual Studio Code...
GitList blame resource command injection
Added: 07/14/2014 CVE: CVE-2014-4511 BID: 68253 OSVDB: 108504 Background GitList is a web-based git repository viewer. Problem A vulnerability in GitList allows remote attackers to execute arbitrary commands by sending a specially crafted request for the blame resource. Resolution Upgrade to...
Gitlist Unauthenticated Remote Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
UBUNTU-CVE-2014-2913
DISPUTED Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor NRPE 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to libexec/checknrpe. NOTE: this issue is disputed by multiple parties. It has been reported...
Fedora 15 : subversion-1.6.16-1.fc15 (2011-3775)
A NULL pointer dereference flaw was found in the way the moddavsvn module processed certain requests to lock working copy paths in a repository. A remote attacker could issue a lock request that could cause the httpd process serving the request to crash. CVE-2011-0715 The Fedora Project would lik...
Subversion: DoS (memory consumption) by processing blame or log -g requests on certain files
Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...
Subversion: DoS (memory consumption) by processing blame or log -g requests on certain files
Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...
DEBIAN-CVE-2010-4644
Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...
CVE-2010-4644
Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...