234 matches found
PT-2025-7918 · Gradle +1 · Gradle +1
Name of the Vulnerable Software and Affected Versions: net.rubygrapefruit:native-platform versions prior to 0.22-milestone-28 Gradle version 8.12 Description: The issue concerns a local privilege escalation vulnerability in the Gradle build automation tool, specifically in its native-platform...
This Week in Spring - February 25th, 2025
Hi, Spring fans, and welcome to another rip-roarin' installment of This Week in Spring! Later today I'll board a plane for magnificent Montreal, Canada for the amazing Confoo conference! I'm super excited! Good news everybody! Spring Boot 3.5.0-M2 is now available! In last week's installment of t...
The vulnerability in the driver set of the Siveillance Video Device Pack software for video surveillance control by Milestone XProtect allows a intruder to disclose protected information.
The vulnerability of the Siveillance Video Device Pack software for video surveillance control by Milestone XProtect relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...
CVE-2020-13283
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title...
CVE-2024-12569
Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...
PT-2024-17657 · Hikvision +1 · Hikvision Camera Driver +1
Name of the Vulnerable Software and Affected Versions: Milestone XProtect Device Pack affected versions not specified HikVision camera driver in XProtect Device Pack affected versions not specified Description: The issue is related to the disclosure of sensitive information in a log file of the...
XWiki Platform 安全漏洞
XWiki Platform is XWiki's open source suite of wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions 1.2-milestone-2 through 16.3.0, which stems from the fact that any user with a master wiki account can run scheduling operations on...
XWiki Platform 安全漏洞
XWiki Platform is the XWiki open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions 3.3-milestone-1 through 16.3.0, which stems from the fact that on an instance with the Extension Repository Application installed...
CVE-2024-10520
The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'check' method of the 'CreateMilestone', 'CreateTaskList', 'CreateTask', and 'DeleteTask' classes in version 2.6.14. This makes it possible for unauthenticated...
UBUNTU-CVE-2024-48707
Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under a action=add or action=edit within managemilestone.php file and b action=addpro within admin.php file...
Milestone XProtect Device Pack 安全漏洞
Milestone XProtect Device Pack is a driver pack from Milestone. A security vulnerability exists in Milestone XProtect Device Pack version 13.1a and prior versions, which originates from a possible buffer overflow in the camera driver, allowing an attacker with internal network access to execute...
Celebrating a Milestone: 100 WIN Integrations and Counting!
The Wiz INtegration WIN Platform has come a long way in the year since it launched...
XWiki 4.2-milestone-3 < 14.10.21, 15.0-rc-1 < 15.5.5, 15.6-rc-1 < 15.10.6, 16.0.0-rc-1 < 16.0.0 XSS Vulnerability (GHSA-wf3x-jccf-5g5g)
Xwiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release
By Uzair Amir Blocksquare, a leading real estate tokenization platform, announces a major milestone: $100 million worth of real estate tokenized… This is a post from HackRead.com Read the original post: Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release...
BIT-GITLAB-2020-13283
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title...
BIT-GITLAB-2022-1190
Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a stored XSS by abusing multi-word milestone references in issue descriptions, comments, etc...
Signal21 Beta Launch Bridges Gap in Blockchain Intelligence Services
By Uzair Amir Signal21, Inc., a blockchain intelligence and data analysis platform, has announced its beta launch marking a significant milestone… This is a post from HackRead.com Read the original post: Signal21 Beta Launch Bridges Gap in Blockchain Intelligence Services...
milestonesystems.in Improper Access Control vulnerability OBB-3837119
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-28760 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A cybersecurity enthusiast has discovered a significant issue, marking a milestone in their career. No technical details or information about th...