Denial Of Service

Mattermost is vulnerable to Denial Of Service. The vulnerability is due to improper sanitisation of allowed characters in different fields of a block in Mattermost Boards. This can be exploited by an attacker resulting in the consumption of excessive resources, leading to Denial Of Service...

Command Injection

rdiffweb is vulnerable to command injection. The vulnerability exists in notification.py due to lack of character sanitisation in SSH key names which allows an attacker to inject a hyperlink that allows an attacker to redirect victim to malicious website...