654 matches found
UBUNTU-CVE-2020-35478
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink. This affects MediaWiki 1.33.0 and later...
PYSEC-2020-302
In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node given by outputindex and the input slot of the dst node...
Unbreakable Enterprise kernel security update
5.4.17-2036.100.6.1.el8uek - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040802 CVE-2020-8694 CVE-2020-8695 - KVM: ioapic: break infinite recursion on lazy EOI Vitaly Kuznetsov Orabug: 32066585 CVE-2020-27152 CVE-2020-27152 - x86/mitigations: Restore paranoid checks fo...
new packages: gcc-toolset-10-make
An update is available for gcc-toolset-10-make. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versions o...
just-make-up-shop.ru Cross Site Scripting vulnerability OBB-1467712
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
OSV-2020-1842 Heap-buffer-overflow in parquet::arrow::SchemaManifest::Make
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25933 Crash type: Heap-buffer-overflow READ 8 Crash state: parquet::arrow::SchemaManifest::Make parquet::arrow::FileReader::Make parquet::arrow::internal::FuzzReader...
alinex-make (=0.0.3), apifs2swagger (>=0.1.0 <=0.1.2) +72 more potentially affected by unknown CVE via getsetdeep (>=2.0.0 <=2.1.0)
getsetdeep NPM version =2.0.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.8.3, =0.0.1, =0.2.4, =0.0.0, =6.20.0, =6.29.0 - docpad-plugin-cachr =2.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8J49-49JQ-VWCQ...
Exploit for Improper Input Validation in Google Android
CVE-2020-0041 This repository contains LPE code for exploitin...
marketing-make-money.com Cross Site Scripting vulnerability OBB-1255812
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-20408
The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class...
PT-2020-14088 · Gogs · Gogs
Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.91 Description: The issue is related to insecure permissions in Gogs, specifically in the MakeEmailPrimary function located in models/user mail.go. This function lacks a check to ensure the user is the owner of the email,...
Fedora: Security Advisory for rubygem-rake (FEDORA-2020-28e06b5f08)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
gcc-toolset-9-make bug fix and enhancement update
An update is available for gcc-toolset-9-make. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versions of...
[SECURITY] Fedora 31 Update: rubygem-rake-12.3.3-200.fc31
Rake is a Make-like program implemented in Ruby. Tasks and dependencies are specified in standard Ruby syntax...
[SECURITY] Fedora 30 Update: rubygem-rake-12.3.3-200.fc30
Rake is a Make-like program implemented in Ruby. Tasks and dependencies are specified in standard Ruby syntax...
UBUNTU-CVE-2020-10960
In MediaWiki before 1.34.1, users can add various Cascading Style Sheets CSS classes which can affect what content is shown or hidden in the user interface to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler ...
make-kanojo.com Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3596 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting make-kanojo.com website and its users. Following...
MassDNS - A High-Performance DNS Stub Resolver For Bulk Lookups And Reconnaissance (Subdomain Enumeration)
MassDNS is a simple high-performance DNS stub resolver targetting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per second using publicly available resolvers...
Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS
TikTok , the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds—but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral...
HashCobra - Hash Cracking Tool
hashcobra Hash Cracking tool. Usage $ ./hashcobra -H --== hashcobra by sepehrdad ==-- usage: hashcobra -o options | misc options: -a - hashing algorithm default: md5 - ? to list available algorithms -c - compression algorithm default: zstd - ? to list available algorithms -h - hash to crack -r -...