295 matches found
PT-2019-14873 · Celery · Flower
Name of the Vulnerable Software and Affected Versions: Flower version 0.9.3 Description: The issue concerns a potential XSS vulnerability via a crafted worker name. However, the project author disputes its validity, stating that worker and task names are internal backend configuration options not...
Gentoo dev-python/flower package denial of service vulnerability
Gentoo dev-python/flower is a distributed task queue real-time monitoring and management package from the Gentoo Foundation. A denial of service vulnerability exists in flower.initd in versions of the Gentoo dev-python/flower package prior to 0.9.1-r1. A local attacker can exploit this...
Flower Han App Has Logic Design Flaws
Flower Han is a cosmetic surgery and beauty community app. There is a logical design vulnerability in the Flower Han app that allows an attacker to register any user and reset a user's password by grabbing packets and modifying a cell phone number...
CVE-2017-14483
flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...
CVE-2017-14483
flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...
CVE-2017-14483
flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...
Command injection
flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...
CVE-2017-14483
CVE-2017-14483 affects the Gentoo dev-python/flower package prior to 0.9.1-r1. The issue arises in flower.initd where the PID file is created with ownership by a non-root account. This can allow local users to terminate arbitrary processes by exploiting access to that non-root account to modify t...
CVE-2017-14483
flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...
CVE-2017-14483
Removed by vendor...
Unfixed XSS vulnerability at www.lilach-flower.co.il
Security researcher Codeshift3r, has submitted on 17/12/2011 a cross-site-scripting XSS vulnerability affecting www.lilach-flower.co.il, which at the time of submission ranked 9822583 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. ...
Sunbyte e-Flower SQL Injection & Xss Vulnerability
Exploit for php platform in category web applications ================================================== Sunbyte e-Flower SQL Injection & Xss Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...
Hackers used a variety of free kill technology induction-vulnerability warning-the black bar safety net
One, you want to make a Trojan horsefree kill The first thing to prepare one without the shell of the Trojan Horse, this point is very important, otherwise free killoperation can not be performed indefinitely. Then we want to Trojan the memory offree to kill, from the above analysis it can be see...
Sunbyte e-Flower SQL Injection
/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...
Sunbyte e-Flower - SQL Injection
Sunbyte e-Flower - SQL Injection / ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor :...
Sunbyte e-Flower - SQL Injection
/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...
Sunbyte e-Flower SQL Injection Vulneralbility
Exploit for unknown platform in category web applications ============================================= Sunbyte e-Flower SQL Injection Vulneralbility ============================================= / Software Information + Vendor : http://www.sunbyte.net/ + Download :...
Flower instruction generator, Perl version-bug warning-the black bar safety net
Author: countercurrent wind Have previously published in the Journal of the articles put up! , published in the hacker X-Files for the first few periods forget, huh? Foreword Believe donefree killfriends are aware flower instruction. Add flowers Instructions Is a good filefree to killmethod, and...
Go for simple flower instructions the IDC scripting-vulnerability warning-the black bar safety net
Find hand modified flower instructions too boring,so simple to learn under the IDC,feel unhappy,but in order to a little to save some physical strength,or bite the bullet and wrote one,there may be a bug,can change the flower instructions are also very limited,I only in order to cope with I came...