CVE-2018-16236

cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering...

CVE-2018-16236

CVE-2018-16236 affects cPanel through version 74, allowing XSS via a crafted filename in the logs subdirectory of a user account. The root cause is that the filename is mishandled during rendering of frontend/THEME/raw/index.html, enabling script injection. Exploit details (in-the-wild, vectors) ...

Niubicms v1.8 SQL Injection Vulnerability in Frontend

Niubicms is by the Nanjing Niukun Network Technology Co., Ltd. independent research and development of the novel website source code, news website source code, for PHP open source system. Niubicms v1.8 SQL injection vulnerability exists in the foreground . Attackers can use the vulnerability to...

Payment Design Vulnerability in the Frontend of Rice CMS

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A payment design vulnerability exists in the frontend of Daimi CMS. An attacker can utilize this vulnerability to arbitrarily modify the size of the payment amount...

Updated cgit packages fix security vulnerability

Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' default is not turned off...

[SECURITY] Fedora 28 Update: CuraEngine-lulzbot-3.2.23-1.fc28

CuraEngine-lulzbot is a C++ console application for 3D printing G-code gene ration. It has been made as a better and faster alternative to the old Skeinforge engi ne. This is just a console application for G-code generation. For a full graphi cal application look at cura-lulzbot which is the...

[SECURITY] Fedora 27 Update: CuraEngine-lulzbot-3.2.23-1.fc27

CuraEngine-lulzbot is a C++ console application for 3D printing G-code gene ration. It has been made as a better and faster alternative to the old Skeinforge engi ne. This is just a console application for G-code generation. For a full graphi cal application look at cura-lulzbot which is the...

Vim.Wasm - Vim Editor Ported To WebAssembly

This project is an experimental fork of Vim editor by @rhysd to compile it into WebAssembly using emscripten and binaryen. Try it with your browser NOTICES Please access from a desktop browser Chrome/Firefox/Safari/Edge. Safari seems the best on macOS. Please avoid slow networks. Your browser wil...

SQL Injection Vulnerability in Frontend of GPS Intelligent Monitoring Management System of Henan Starcom

Henan Starcom Information Technology Co., Ltd. is a specialized company engaged in GPS global positioning operation services. SQL injection vulnerability exists in the front-end of the GPS Intelligent Monitoring Management System of Henan Xingtong, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in the Frontend of DaQuanZhouAuto.com

It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. SQL injection vulnerability exists in the front-end of DaQuanZhouAuto.com, the vulnerability stems from the failure to filter the pagenu...

Cookie Injection Vulnerability in the Frontend of DaQuanZhouAuto.com

It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. Cookie injection vulnerability exists in the frontend of DaQuanzhouAuto.com, which can be exploited by attackers to obtain sensitive...

Arbitrary File Upload Vulnerability in the Frontend of Bizlaw eCom Information Management Software

Bizlawyer eTongue information management software is based on standardized management, the use of larger law firms needs to develop a comprehensive set of management software. There is an arbitrary file upload vulnerability in the front-end of Bizlawyer eTalk Information Management Software. An...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

Cross-Site Scripting in extension "Frontend Treeview" (mh_treeview)

The extension fails to properly encode user input for output in HTML context...

PbootCMS V1.1.8-20180807 SQL Injection Vulnerability in Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. PbootCMS V1.1.8-20180807 SQL injection vulnerability exists in the front-end , the vulnerability stems from the front-end does not limit the input information , the attacker can use the vulnerability to...

SQL Injection Vulnerability in the Frontend of Rongguang Information Ordering and Consumption System (荣光信息订取餐消费系统前台存在SQL注入漏洞)

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the frontend of Rongguang Information Ordering and Consumption System, which can be exploited by...

Debian DSA-4263-1 : cgit - security update

Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' default is not turned off. C Tenable...

SQL Injection Vulnerability in Frontend of Sunny eDrive Reservation Management System

Jiangsu Gangcheng Automobile Transportation Group is a provincial group mainly engaged in road transportation and related industries. A SQL injection vulnerability exists in the frontend of the Sunny eDrive reservation management system. An attacker can exploit the vulnerability to obtain sensiti...

SQL Injection Vulnerability in the Frontend of Bureau Veritas Law Firm's Integrated Information Management Software

Bizhi law firms comprehensive information management software is Bizhi law firms for the use of the demand for a comprehensive set of specially developed management software. SQL injection vulnerability exists in the frontend of Bizlaw Firm Information Management Software. An attacker can use the...

PbootCMS V1.1.6-20180721 Code Execution Vulnerability in the Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. A code execution vulnerability exists in the frontend of PbootCMS version V1.1.6-20180721, which can be exploited by an attacker to execute remote code...