ldapdomaindump

LDAPDomainDump Volcador de información de Active Directory a través de LDAP Introducción En un dominio de Active Directory, cualquier usuario autenticado o máquina puede recuperar mucha información interesante a través de LDAP. Esto convierte a LDAP en un protocolo interesante para recopilar...

CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

Using Domain Objects in the rulebase might cause wrong policy actions in R80.10 JHF Take_91-103

...

Cross-site Scripting (XSS)

Overview org.grails.plugins:fields is a customizable form-field rendering based on overrideable GSP template. Affected versions of this package are vulnerable to Cross-site Scripting XSS. Domain objects being displayed by tags of the plugin containing HTML or JavaScript code are not being encoded...