Server-side Request Forgery (SSRF)

Overview github.com/thecodingmachine/gotenberg is a Docker-powered stateless API for PDF files. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as...

Server-side Request Forgery (SSRF)

Overview github.com/gotenberg/gotenberg/v7/pkg/modules/chromium is a Docker-powered stateless API for PDF files. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when the src attribute of an HTML element refers to an internal syst...

Server side request forgery (ssrf)

SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...

Engel & Völkers Technology GmbH: XXE on www.publish.engelvoelkers.com

Summary: A XML External Entities vulnerability has been found on www.publish.engelvoelkers.com:8443. Initially a GET request was made to /dp/services and that returned a 500 Error with some XML data. Changing the HTTP request method to POST with some XML data produced a different response, so it...

IBM Financial Transaction Manager for Corporate Payment Services Information Disclosure Vulnerability (CNVD-2019-07171)

IBM Financial Transaction Manager for Corporate Payment Services FTM CPS is a Financial Transaction Manager product from IBM, USA. The product is primarily used to monitor, track and report on financial payments and transactions. An information disclosure vulnerability exists in IBM FTM CPS versi...

Information Disclosure

Moodle is vulnerable to information disclosure. The library displays the file system path of the Moodle Installation through an error message when a user tries to access an internal file...

Server: Information Exposure Through Directory Listing in the file scanner

Due to an incorrect usage of an ownCloud internal file system function the passed path to the file scanner was resolved relatively. An authenticated adversary may thus be able to get a listing of files existing on the filesystem. However, it is not possible to access any of these files. This caus...

Ubuntu Update for postfix vulnerabilities USN-642-1

Ubuntu Update for Linux kernel vulnerabilities USN-642-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6421.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postfix vulnerabilities USN-642-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...