pyvisauto (1.0.1), ximilar-client (>=1.10.2, <=1.10.12) +1 more potentially affected by CVE-2019-14492 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-14492 Source advisory: OSV:GHSA-FW99-F933-RGH8...

multi-template-matching (>=1.5.1, <=1.5.3) potentially affected by CVE-2019-14491 via opencv-python-headless (4.1.0.25)

opencv-python-headless PYPI version 4.1.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - multi-template-matching =1.5.1, =1.5.3 Source cves: CVE-2019-14491 Source advisory: GHSA-FM39-CW8H-3P63...

multi-template-matching (>=1.5.1, <=1.5.3) potentially affected by CVE-2019-14491 via opencv-python-headless (4.1.0.25)

opencv-python-headless PYPI version 4.1.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - multi-template-matching =1.5.1, =1.5.3 Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

satsense (0.9.0), ximilar-client (>=1.0.2, <=1.10.1) potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=3.4.2.17, <=3.4.3.18)

opencv-contrib-python-headless PYPI version =3.4.2.17, =1.0.2, =1.10.1 Source cves: CVE-2019-14491 Source advisory: GHSA-FM39-CW8H-3P63...

satsense (0.9.0), ximilar-client (>=1.0.2, <=1.10.1) potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=3.4.2.17, <=3.4.3.18)

opencv-contrib-python-headless PYPI version =3.4.2.17, =1.0.2, =1.10.1 Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

pyvisauto (1.0.1), ximilar-client (>=1.10.2, <=1.10.12) +1 more potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-14491 Source advisory: GHSA-FM39-CW8H-3P63...

pyvisauto (1.0.1), ximilar-client (>=1.10.2, <=1.10.12) +1 more potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

FUSE - A Penetration Testing Tool For Finding File Upload Bugs

FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload UEFU vulnerabilities. The details of the testing strategy is in our paper, "FUSE: Finding File Upload Bugs via Penetration Testing", which appeared in NDSS 2020. To see how to configure and execute FUSE,...

Directory Traversal

Overview convert-svg-to-png is a package for converting SVG to PNG using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a...

PT-2021-4469

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 93.0.4577.63 Description The issue is related to inappropriate implementation in DevTools, which can be exploited by a remote attacker to gain unauthorized access to protected information or cause a denial of...

[ASA-202107-65] jre-openjdk-headless: multiple issues

Arch Linux Security Advisory ASA-202107-65 ========================================== Severity: High Date : 2021-07-22 CVE-ID : CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 Package : jre-openjdk-headless Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2188 Summary =====...

[ASA-202107-54] jre11-openjdk-headless: multiple issues

Arch Linux Security Advisory ASA-202107-54 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 Package : jre11-openjdk-headless Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2189 Summary...

QIWI: SSRF на https://qiwi.com с помощью "Prerender HAR Capturer"

Здравствуйте! На сайте https://qiwi.com вы используете Prerender HAR Capturer 5.6.0 на основе Headless Chrome для рендеринга HTML, снимков экрана, PDF-файлов и файлов HAR с любой веб-страницы https://github.com/prerender/prerender. Если на qiwi.com послать запрос с измененным юзер-агентом...

Monospace Directus Headless CMS File Upload / Rule Bypass Vulnerabilities

======================================================================= title: Arbitrary File Upload and Bypassing .htaccess Rules product: Monospace Directus Headless CMS vulnerable version: v8.8.2 fixed version: v8.8.2, v9 is not affected because of different architecture CVE number:...

SSRF in Rendertron

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

GHSA-XR9H-9M79-X29G SSRF in Rendertron

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

Server-Side Request Forgery (SSRF)

rendertron is vulnerable to sever-side request forgery SSRF. The vulnerability exists as it allows the headless chrome to access the internal domains, forcing the rendertron headless chrome process to render internal sites and display the response as a screenshot...

CVE-2020-8902

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

CVE-2020-8902

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

Server side request forgery (ssrf)

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...