EUVD-2019-3185

Malware in sbrugna...

SUSE CVE-2025-37956

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from dalloc. This patch return the error when attempting to rename a file or directory with an empty new na...

The vulnerability of the `btrfs_log_new_name()` function in the `fs/btrfs/tree-log.c` module of the file system support module for Linux’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfslognewname function in the fs/btrfs/tree-log.c module of the btrfs file system support module in Linux systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service...

Certification body rebrands to Coalfire Certification

Were excited about our new name. It reflects what we do and where we are headed. We share this excitement with our clients and our teams and extend thanks to everyone that helped push the certification body to this level of framework coverage as Coalfire Certification enters this next period of...

CVE-2020-21087

Cross Site Scripting XSS in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool...

CVE-2020-21087

Cross Site Scripting XSS in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool...

X2Engine X2CRM 跨站脚本漏洞

pczupil X2CRM is a pczupil open source application. A next generation open source social selling application for small and medium sized businesses. X2Engine X2CRM v6.9 and later versions of a security vulnerability , a remote attacker can exploit the vulnerability through the "Rename Module" tool...

CVE-2020-21087: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool...

PT-2021-10585

Name of the Vulnerable Software and Affected Versions: X2Engine X2CRM versions prior to 6.9 Description: The issue allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the New Name field of the Rename a Module tool. This is a Cross Site Scripting XSS...

CVE-2019-11513

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

PT-2019-12346

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions through 2.2.10 Description The issue concerns a Reflected XSS in the File Manager component. This occurs via the New name field when performing a Rename action. Recommendations For versions through 2.2.10, update to a...

CVE-2019-11513: Improper Neutralization of Input During Web Page Generation

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

CVE-2017-9767

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...

Design/Logic Flaw

Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382...

PT-2014-2516

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the new name parameter to the "apps/bookmarks/ajax/renameTag.php" API endpoint or multiple...