EUVD-2019-7188

Malware in sbrugna...

CVE-2019-16511

CVE-2019-16511 affects FireGiant WiX Toolset’s DTF prior to 3.11.2. The vulnerability arises from directory traversal during CAB/ZIP extraction when the full archive name (including ../) is concatenated with the destination path in Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment...

PT-2019-14679

Name of the Vulnerable Software and Affected Versions FireGiant WiX Toolset versions prior to 3.11.2 Description An issue in DTF allows directory traversal during CAB or ZIP archive extraction. This occurs because the full name of an archive file, including any ../ sequence, is concatenated with...

dtf-stuttgart.de XSS vulnerability

Open Bug Bounty ID: OBB-582320 Description| Value ---|--- Affected Website:| dtf-stuttgart.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...