7 matches found
CVE-2020-1054
CVE-2020-1054 Apprendimento di CVE-2020-1054 Screenshot Riferimenti https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html rubare token di sicurezza https://github.com/mwrlabs/CVE-2016-7255 funzione di leak https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp...
Kimai's Twig function config() leaks server-wide secrets (LDAP bind password, SAML SP private key) via invoice/export templates
Summary Kimai's Twig sandbox StrictPolicy, used for admin-uploaded invoice and export templates allow-lists the config Twig function with no key filtering. configname delegates to App\Configuration\SystemConfiguration::find$name, which returns arbitrary entries from the flattened kimai.config...
EUVD-2011-2769
Malware in sbrugna...
CVE-2011-2795
Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a "cross-frame function leak."...
Cross site scripting
Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a "cross-frame function leak."...
CVE-2011-2795
Google Chrome before 13.0.782.107 is vulnerable to a cross-frame function leak that allows remote attackers to bypass same-origin access restrictions via a crafted web site; remediation is to upgrade to 13.0.782.107 or later.
