Code injection

In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read file...

CVE-2015-5350

In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read file...

CVE-2015-5350

In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read file...

CVE-2015-5350

CVE-2015-5350 affects Garden Linux via the garden-linux nstar executable in Garden versions 0.22.0–0.329.0. An attacker staging an application on Cloud Foundry (Diego and Garden) with a malicious custom buildpack could read host-system files that the vcap user can read and package them into the a...

CVE-2015-5350: Improper Access Control

In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read file...

PT-2018-4400

Name of the Vulnerable Software and Affected Versions Garden versions 0.22.0 through 0.329.0 Description A vulnerability has been discovered in the garden-linux nstar executable of Garden, allowing access to files on the host system. This issue can be exploited by staging an application on Cloud...

san-diego-theater.com XSS vulnerability

Open Bug Bounty ID: OBB-360971 Description| Value ---|--- Affected Website:| san-diego-theater.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

wework.com XSS vulnerability

Open Bug Bounty ID: OBB-277651 Description| Value ---|--- Affected Website:| wework.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

Denial of service

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091

CVE-2016-3091 affects Cloud Foundry Diego component; Diego releases 0.1468.0–0.1470.0 are vulnerable to denial-of-service due to log handling that splits large UTF-8 log streams, exploitable by an app emitting malformed UTF-8. Remediation: upgrade to Diego 0.1471.0.

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091: Undefined Security Weakness

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

PT-2017-8330

Name of the Vulnerable Software and Affected Versions Cloud Foundry Diego versions 0.1468.0 through 0.1470.0 Description The issue allows remote attackers to cause a denial of service. Recommendations For Cloud Foundry Diego versions 0.1468.0 through 0.1470.0, update to a version outside of the...

WordPress WooCommerce Direct Download Local File Inclusion Exploit

WordPress Direct Download for WooCommerce versions up to 1.15 suffer from a local file inclusion vulnerability. lfiattackfordirectdownloadwoocommerce.py Author: Diego Celdran Morell Web: http://www.diegoceldran.es/ Fecha Ultima actualizacion: 15/01/2017 Version: V1.0 No me hago responsable del ma...

zoo.sandiegozoo.org XSS vulnerability

Open Bug Bounty ID: OBB-205162 Description| Value ---|--- Affected Website:| zoo.sandiegozoo.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Pivotal Software Cloud Foundry Diego Component Denial of Service Vulnerability

Pivotal Software Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software, U.S. Diego is one of the components responsible for scheduling and running tasks and daemons. A denial of service vulnerability exists in the Diego component of Pivotal...

CVE-2016-3091 Diego log encoding vulnerability | Cloud Foundry

CVE-2016-3091 Diego log encoding vulnerability High Vendor Cloud Foundry Foundation Versions Affected Diego-release versions 0.1468.0 through 0.1470.0 Description Due to how Diego handles breaking up large log streams on UTF-8 boundaries, it is possible to cause a denial of service on a Cloud...