61 matches found
Hardcoded credentials
Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens...
SQL Injection in 'core/ajax/ajax_data.php'
Description There exists an SQL injection affecting the customerid parameter located in the file core/ajax/ajaxdata.php Let's take a look at the following code: https://github.com/unilogies/bumsys/blob/9dc2de204116297a7e528c38bc3b1e89bf40f907/core/ajax/ajaxdata.phpL537 sql where stockproductid =...
[SECURITY] Fedora 36 Update: ghc-cmark-gfm-0.2.5-1.fc36
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.6 and does not require prior installation of the C library...
PayloadsAllTheThings
It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads, but no specific exploit or vulnerability is identified. However, the presence of a GitHub Action workflow file .github/FUNDING.yml suggests that the repository may be used for generating or...
[SECURITY] Fedora 31 Update: ghc-cmark-gfm-0.2.2-1.fc31
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sour ces for libcmark-gfm 0.29.0.gfm.0 and does not require prior installation of the C library...
[SECURITY] Fedora 33 Update: ghc-cmark-gfm-0.2.2-1.fc33
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sour ces for libcmark-gfm 0.29.0.gfm.0 and does not require prior installation of the C library...
@dotgov/bpmn (>=0.0.1 <=0.0.29), @dotgov/z_bpmn (>=0.0.1 <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2 <=0.30.0)
bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...
DEBIAN-CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
UBUNTU-CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
UBUNTU-CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
DEBIAN-CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
Code injection
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
CVE-2016-7794
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name...
CVE-2016-7793
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL...
CVE-2016-7793
CVE-2016-7793 affects the project sociomantic-tsunami/git-hub up to version 0.10.2 (before 0.10.3). The vulnerability allows remote attackers to execute arbitrary code via a crafted repository URL, as documented in connected sources. The CVSS metrics indicate a high-severity, network-exploitable ...
