59 matches found
SQL Injection in 'core/ajax/ajax_data.php'
Description There exists an SQL injection affecting the customerid parameter located in the file core/ajax/ajaxdata.php Let's take a look at the following code: https://github.com/unilogies/bumsys/blob/9dc2de204116297a7e528c38bc3b1e89bf40f907/core/ajax/ajaxdata.phpL537 sql where stockproductid =...
[SECURITY] Fedora 36 Update: ghc-cmark-gfm-0.2.5-1.fc36
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.6 and does not require prior installation of the C library...
PayloadsAllTheThings
It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads, but no specific exploit or vulnerability is identified. However, the presence of a GitHub Action workflow file .github/FUNDING.yml suggests that the repository may be used for generating or...
[SECURITY] Fedora 31 Update: ghc-cmark-gfm-0.2.2-1.fc31
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sour ces for libcmark-gfm 0.29.0.gfm.0 and does not require prior installation of the C library...
[SECURITY] Fedora 33 Update: ghc-cmark-gfm-0.2.2-1.fc33
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sour ces for libcmark-gfm 0.29.0.gfm.0 and does not require prior installation of the C library...
UBUNTU-CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
DEBIAN-CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
UBUNTU-CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
Code injection
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
DEBIAN-CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7793
CVE-2016-7793 affects the project sociomantic-tsunami/git-hub up to version 0.10.2 (before 0.10.3). The vulnerability allows remote attackers to execute arbitrary code via a crafted repository URL, as documented in connected sources. The CVSS metrics indicate a high-severity, network-exploitable ...
CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
CVE-2016-7794
CVE-2016-7794 affects sociomantic-tsunami git-hub prior to version 0.10.3. The vulnerability allows remote code execution via a crafted repository name. Public metadata notes high/critical severity (CVSS v2 base 7.5, CVSS v3 base 9.8) with network attack vector and no authentication required, and...