6602 matches found
SQL Injection
WordPress is susceptible to SQL injection attacks. The attacks exist because the library does not check the additional values for placeholders in wpdb-prepare and does not escape percent % characters...
Regular Expression Denial Of Service (ReDoS)
mime is vulnerable to regular expression denial of service ReDoS attacks. The library does not restrict the type of characters that it takes in, causing the application to take a long time to process. A malicious user can use this behaviour to cause a ReDoS...
Regular Expression Denial Of Service (ReDoS)
timespan is vulnerable to regular expression denial of service ReDoS attacks. The library does not restrict the type of characters in a timestamp before parsing it, allowing a malicious user to pass a timestamp to cause a ReDoS...
Regular Expression Denial of Service
Overview Affected versions of marked are vulnerable to a regular expression denial of service. The amplification in this vulnerability is significant, with 1,000 characters resulting in the event loop being blocked for around 6 seconds. Recommendation Update to version 0.3.9 or later. References ...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
Design/Logic Flaw
FreeIPA might display user data improperly via vectors involving non-printable characters...
DEBIAN-CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
Technical details (affected components, root cause, and patch status) are not publicly provided in the connected documents. Monitor vendor advisories and security trackers for updates.
Foscam IP Video Camera CGIProxy.fcgi SMTP Test Command Injection Vulnerability(CVE-2017-2845)
Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tes...
Escape sequence injection vulnerability in the Basic authentication of WEBrick
There is an escape sequence injection vulnerability in the Basic authentication of WEBrick bundled by Ruby. When using the Basic authentication of WEBrick, clients can pass an arbitrary string as the user name. WEBrick outputs the passed user name intact to its log, then an attacker can inject...
Trend Micro Control Manager - ImportFile Directory Traversal RCE Exploit
Exploit for windows platform in category remote exploits require 'msf/core' require 'msf/core/exploit/phpexe' class MetasploitModule 'Trend Micro Control Manager importFile Directory Traversal RCE', 'Description' = %q This module exploits a directory traversal vulnerability found in Trend Micro...
Radancy: Weak password
It takes ash123456789123456789 as a password,which is not secure.It can be cracked using Dictionary,brute force etc attacks. Impact: If password complexity is not enforced people may tend to put easily guessable password which may be exploitable for a malicious user. Solution-To make it more...
CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...
CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...
Code injection
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...
CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...