CVE-2019-16114: Incorrect Authorization

In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him to gain access to the application. Next, he can change the directory that the application uploads files to, which allows him to achieve remote code execution...

PT-2019-11979

Name of the Vulnerable Software and Affected Versions LibreNMS versions through 1.47 Description An issue was discovered in LibreNMS where several scripts perform dynamic script inclusion via the include function on user-supplied input without sanitizing the values. This allows an attacker to...

Exploit for Cross-site Scripting in Atlassian Html_Include_And_Replace_Macro

CVE-2019-15053 FAB-2019-00156 Vulnerability discoverd by me...

CVE-2019-15053

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...

Design/Logic Flaw

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...

CVE-2019-15053

The CVE-2019-15053 issue affects the HTML Include and replace macro plugin for Confluence Server (pre-1.5.0). A bypass of the includeScripts=false XSS protection via an IFRAME vector is documented, enabling cross-site scripting. Connected sources show a public exploit draft and vendor advisories ...

CVE-2019-15053

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...

CVE-2019-15053: Improper Neutralization of Input During Web Page Generation

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...

TeamPass <= 2.1.27.36 Multiple XSS Vulnerabilities

TeamPass is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-20949

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

CVE-2016-10828

cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path SEC-97...

CVE-2018-20949

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

CVE-2016-10837

cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path SEC-46...

CVE-2018-20949: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

PT-2019-10384

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows self XSS in the WHM Apache Configuration Include Editor. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later to resolve the issue...

CVE-2019-13948: Improper Neutralization of Input During Web Page Generation

SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element...

PT-2019-13487

Name of the Vulnerable Software and Affected Versions SyGuestBook version 1.2 Description The issue arises from the isValidData function in include/functions.php not properly blocking XSS payloads, allowing for stored XSS attacks. This can be demonstrated by a crafted use of the onerror attribute...

CVE-2019-13396

FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the forminclude parameter in an index.php?q=system-handle-form-submit POST request because of an includeonce in systemhandleformsubmit in modules/system/system.module...

PT-2019-13308

Name of the Vulnerable Software and Affected Versions FlightPath versions 4.x through 5.0-x Description The issue allows directory traversal and Local File Inclusion through the form include parameter in an "index.php?q=system-handle-form-submit" POST request. This is due to an include once in th...

[SECURITY] [DLA 1823-1] linux security update

Package : linux Version : 3.16.68-2 CVE ID : CVE-2019-3846 CVE-2019-5489 CVE-2019-10126 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11810 CVE-2019-11833 CVE-2019-11884 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of...