102 matches found
CVE-2022-25967
Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution RCE by overwriting template engine configuration variables with view options received from The Express render API. Note: This is exploitable only for users who are rendering templates with user-defined data...
CVE-2022-25967
Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution RCE by overwriting template engine configuration variables with view options received from The Express render API. Note: This is exploitable only for users who are rendering templates with user-defined data...
Eta 安全漏洞
Eta is Eta open source a lightweight , fast embedded JS template engine . It runs in Node, Deno and browsers. A security vulnerability exists in versions of Eta prior to 2.0.0, which stems from its use of view options received from the Express render API to override template engine configuration...
visum-eta-kanada.de Cross Site Scripting vulnerability OBB-3088253
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Remote Code Execution (RCE)
Overview eta is a Lightweight, fast, and powerful embedded JS template engine Affected versions of this package are vulnerable to Remote Code Execution RCE by overwriting template engine configuration variables with view options received from The Express render API. Note: This is exploitable only...
CVE-2021-44610
Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the 1 URLs, 2 langid, 3 tmplid, 4 modrewrite 5 etadoctype. 6 metacharset, 7 defaultgroup, and 8 page group parameters in the settings mode in admin/index.php...
TimeLock cannot schedule the same calls multiple times
Handle cmichel Vulnerability details The TimeLock.schedule function reverts if the same targets and data fields are used as the txHash will be the same. This means one cannot schedule the same transactions multiple times. Impact Imagine the delay is set to 30 days, but a contractor needs to be pa...
etaelectro.com Cross Site Scripting vulnerability OBB-1488267
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Arbitrary File Deletion Vulnerability in ETA CMS (CNVD-2020-26406)
ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete configuration files...
Arbitrary File Deletion Vulnerability in ETA CMS (CNVD-2020-26404)
ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete configuration files...
Logic Flaw Vulnerability in ETA CMS (CNVD-2020-26403)
ETA CMS is a simple, practical and efficient website builder. A logical flaw exists in EDA CMS, which can be exploited by an attacker to rename arbitrary files to gain control of the web server...
Code Execution Vulnerability in ETA CMS (CNVD-2020-26408)
ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...
Logic Flaw Vulnerability in ETA CMS
ETA CMS is a simple, practical and efficient website builder. A logic flaw vulnerability exists in ETA CMS, which can be exploited by an attacker to modify the administrator password...
Cisco IOS XE ETA Denial of Service Vulnerability
Cisco IOS XE is a modular operating system based on the Linux kernel. A denial of service vulnerability exists in the Cisco Encrypted Traffic Analysis ETA feature of Cisco IOS XE, which arises from a logic error in the program when processing malformed incoming packets, and can be exploited by a...
CVE-2019-1741
CVE-2019-1741 affects Cisco IOS XE Software ETA (Encrypted Traffic Analytics). The flaw is a logic error in handling malformed incoming IP packets that can lead to access to a freed internal data structure, enabling an unauthenticated, remote attacker to cause a device reload and a DoS. Exploitat...
canada-visa-eta.com XSS vulnerability
Open Bug Bounty ID: OBB-667353 Description| Value ---|--- Affected Website:| canada-visa-eta.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
canada-visa-eta.com XSS vulnerability
Open Bug Bounty ID: OBB-593409 Description| Value ---|--- Affected Website:| canada-visa-eta.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pkapp.pka.gov.my IFRAME Injection vulnerability
Open Bug Bounty ID: OBB-544194 Description| Value ---|--- Affected Website:| pkapp.pka.gov.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-7326
The ETA Mobile aka com.en2grate.etamobile application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The ETA Mobile aka com.en2grate.etamobile application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...