Code injection

USVN aka User-friendly SVN before 1.0.10 allows attackers to execute arbitrary code in the commit view...

CVE-2020-25069

USVN (User-friendly SVN) prior to version 1.0.10 exposes an arbitrary code execution vulnerability in the commit view. Multiple connected sources confirm that the issue affects USVN up through 1.0.10, with the fix implemented in 1.0.10. Root cause details are not fully specified in the provided d...

CVE-2020-25070

CVE-2020-25070 affects USVN (User-friendly SVN) prior to version 1.0.10. The issue is a cross-site request forgery (CSRF) flaw caused by the absence of the SameSite Strict cookie attribute. Impact is described as CSRF risk; no exploit details are provided in the sources. Remediation: upgrade to U...

CVE-2020-25070

USVN aka User-friendly SVN before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature...

[SECURITY] Fedora 31 Update: lilypond-2.19.84-3.fc31

LilyPond is an automated music engraving system. It formats music beautifully and automatically, and has a friendly syntax for its input files...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

Design/Logic Flaw

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

CVE-2020-17364 affects USVN (User-friendly SVN) prior to 1.0.9. The issue is an XSS vulnerability that can be triggered via SVN logs, with CVSS v3.1 base score 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRED, scope CHANGED; confidentiality/integrity impact LOW, availability NONE...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

petfriendlyrentals.co.uk Cross Site Scripting vulnerability OBB-1229596

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Apple Pushes Back Against Ad Tracking in Safari and iOS 14

At WWDC, the company detailed a litany of privacy-friendly improvements to its software...

tattoo-friendly.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174622 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

F2fs-tools fsck.f2fs sanity_check_area_boundary code execution vulnerability

Summary An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

CVE-2020-7470

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field after a successful login with the Web Admin Password...

CVE-2020-7470: Improper Neutralization of Input During Web Page Generation

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field after a successful login with the Web Admin Password...

XSS Vulnerability at YUNUCMS Friendly Link API

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YUNUCMS Friendly Link API at the existence of XSS vulnerability, attackers can exploit the vulnerability to obtain the administrator's cookies...

Arbitrary File Deletion Vulnerability in DSCMS Enterprise Content Management System

DSCMS is Changsha Deshaun network based on ThinkPHP5.0 framework development, using PHP + Mysql architecture, is a suitable for the construction of enterprise website cms station building system features a comprehensive SEO-friendly dual-language open source CMS system. DSCMS enterprise station...

CAINE 11 - GNU/Linux Live Distribution For Digital Forensics Project, Windows Side Forensics And Incident Response

CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni Bassetti Bari - Italy. CAINE offers a complete forensic environment that is organized to integrate existing software tools as...

[SECURITY] Fedora 30 Update: limnoria-20191109-2.fc30

Supybot is a robust it doesn't crash, user friendly it's easy to configure and programmer friendly plugins are extremely easy to write Python IRC bot. It aims to be an adequate replacement for most existing IRC bots. It includes a very flexible and powerful ACL system for controlling access to...