CVE-2019-16926

Flower 0.9.3 has XSS via a crafted worker name. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has ful...

CVE-2019-16926

Flower version 0.9.3 is described as having a client-side XSS via a crafted worker name (CVE-2019-16926). The affected software is Flower, a web-based Celery monitor, with the vulnerability attributed to internal backend configuration options for worker and task names, which are not user-facing. ...

PT-2019-14873 · Celery · Flower

Name of the Vulnerable Software and Affected Versions: Flower version 0.9.3 Description: The issue concerns a potential XSS vulnerability via a crafted worker name. However, the project author disputes its validity, stating that worker and task names are internal backend configuration options not...

PT-2019-14872 · Celery · Flower

Name of the Vulnerable Software and Affected Versions: Flower version 0.9.3 Description: The issue concerns a potential XSS via the name parameter in an @app.task call. However, the project author disputes the validity of this issue, stating that worker and task names are internal backend...

Gentoo dev-python/flower package denial of service vulnerability

Gentoo dev-python/flower is a distributed task queue real-time monitoring and management package from the Gentoo Foundation. A denial of service vulnerability exists in flower.initd in versions of the Gentoo dev-python/flower package prior to 0.9.1-r1. A local attacker can exploit this...

Flower Han App Has Logic Design Flaws

Flower Han is a cosmetic surgery and beauty community app. There is a logical design vulnerability in the Flower Han app that allows an attacker to register any user and reset a user's password by grabbing packets and modifying a cell phone number...

CVE-2017-14483

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

Command injection

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

CVE-2017-14483

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

CVE-2017-14483

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

CVE-2017-14483

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

CVE-2017-14483

CVE-2017-14483 affects the Gentoo dev-python/flower package prior to 0.9.1-r1. The issue arises in flower.initd where the PID file is created with ownership by a non-root account. This can allow local users to terminate arbitrary processes by exploiting access to that non-root account to modify t...

CVE-2017-14483

Removed by vendor...

Unfixed XSS vulnerability at www.lilach-flower.co.il

Security researcher Codeshift3r, has submitted on 17/12/2011 a cross-site-scripting XSS vulnerability affecting www.lilach-flower.co.il, which at the time of submission ranked 9822583 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. ...

Sunbyte e-Flower SQL Injection & Xss Vulnerability

Exploit for php platform in category web applications ================================================== Sunbyte e-Flower SQL Injection & Xss Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Hackers used a variety of free kill technology induction-vulnerability warning-the black bar safety net

One, you want to make a Trojan horsefree kill The first thing to prepare one without the shell of the Trojan Horse, this point is very important, otherwise free killoperation can not be performed indefinitely. Then we want to Trojan the memory offree to kill, from the above analysis it can be see...

Sunbyte e-Flower SQL Injection

/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower SQL Injection Vulneralbility

Exploit for unknown platform in category web applications ============================================= Sunbyte e-Flower SQL Injection Vulneralbility ============================================= / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower - SQL Injection

/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower - SQL Injection

Sunbyte e-Flower - SQL Injection / ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor :...