PT-2026-68405

Name of the Vulnerable Software and Affected Versions Slider, Gallery, and Carousel by MetaSlider versions prior to 3.111.1 Description Insufficient input sanitization and output escaping allow authenticated attackers with Author-level access and above to perform Stored Cross-Site Scripting. This...

Denial of Service in manolo/gwtupload

Overview com.googlecode.gwtupload:gwtupload is a library for uploading files to web servers, showing a progress bar with real information about the process file size, bytes transferred, etc. Affected versions of this package are vulnerable to Denial of Service DoS. server/UploadServlet.java the...

Manolo GWTUpload Code Issue Vulnerability

Manolo GWTUpload is a library based on HTML and JavaScript , it is mainly used to upload files to a Web server . A security vulnerability exists in server/UploadServlet.java the servlet that handles file uploads in Manolo GWTUpload version 1.0.3. An attacker can exploit this vulnerability with th...

CVE-2020-13128

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java the servlet for handling file upload accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service...

PT-2020-13345

Name of the Vulnerable Software and Affected Versions Manolo GWTUpload version 1.0.3 Description An issue was discovered in the server/UploadServlet.java, which is the servlet for handling file upload. It accepts a delay parameter that causes a thread to sleep. This can be abused to cause all of ...

CVE-2020-13128: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java the servlet for handling file upload accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service...

EOS has a fake recharge vulnerability

EOS is a blockchain operating system designed for commercial distributed applications. The vulnerability stems from an improper configuration of a specific parameter delay-sec in cleos. An attacker could use this vulnerability to increase the amount of tokens in an individual's account with a fal...