syntax-check 安全漏洞

syntax-check is an open source syntax checking tool from fish-shop. A security vulnerability exists in syntax-check, which stems from improper delimiter neutralization in pattern input...

fence-agents 代码注入漏洞

fence-agents is an open source agent program from ClusterLabs that supports remote power management of clustered devices. A code injection vulnerability exists in fence-agents that stems from allowing remote code execution, which in turn leads to elevation of privilege...

Tailoring Management System SQL注入漏洞

Tailoring Management System is itsourcecode open source tailoring management system. A SQL injection vulnerability exists in Tailoring Management System version 1.0, which originates from a SQL injection vulnerability in the id/inccat/desc/date/amount parameter of the /incedit.php page...

Skyport Daemon 安全漏洞

Skyport Daemon skyportd is a Skyport open source daemon for Skyport panels. A security vulnerability exists in Skyport Daemon, which stems from a vulnerability that can lead to 100% CPU usage and OOM in many cases...

EUVD-2024-2569

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authentication and additionally the endpoint to update an existing file is susceptible to path traversal...

Cross-site scripting vulnerability in microweber admin.php file

Microweber is Microweber open source can provide drag and drop functionality of the online store management system . The system includes adding products , images and other modules. microweber 2.0.16 version of a cross-site scripting vulnerability , the vulnerability stems from...

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2024-36715)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for iOS, which can be exploited by attackers to execute Javascript commands in the browser...

Gitea Cross-site Scripting Vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...

CVE-2024-6886 Inproper Sanitation of field leading to stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...

CVE-2024-6886 Inproper Sanitation of field leading to stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...

CVE-2024-6886

Summary: CVE-2024-6886 is a stored XSS vulnerability in Gitea 1.22.0 that allows authenticated attackers to inject JavaScript via repository descriptions, which is stored on the server and executed in other users’ sessions. The Nuclei template, Exploit-DB entry, and OSV entries confirm the issue ...

Tailoring Management System 代码问题漏洞

Tailoring Management System is a tailoring management system from itsourcecode open source. A code issue vulnerability exists in Tailoring Management System version 1.0, which stems from an incorrect manipulation of the parameter bgimg that can lead to unrestricted file uploads...

Fedora: Security Advisory (FEDORA-2024-3a1a0a664e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-41960

mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scrip...

CVE-2024-41959 Cross-site Scripting (XSS) via API Logs in mailcow: dockerized

mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a JavaScript payload into the API logs. This payload is executed whenever the API logs page is viewed, potentially allowing an attacker to run malicious scripts in the context of th...

CVE-2024-41958 Two-Factor Authentication (2FA) Bypass in mailcow: dockerized

mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the two-factor authentication 2FA mechanism. This flaw allows an authenticated attacker to bypass the 2FA protection, enabling unauthorized access to other accounts that are otherwi...

Introducing the Rapid7 Command Platform

Integrated Security Operations for the Next-Generation Attack Surface As cybercrime and attack surfaces have sprawled, Rapid7 has been able to grow with our customers because we are relentlessly focused on relevance. The way we see it, relevance doesn’t mean aligning to market definitions of...

Apple Unveils Homomorphic Encryption Package for Secure Cloud Computing

Apples open-source "swift-homomorphic-encryption" package revolutionizes privacy in cloud computing. It allows computations on encrypted data without decryption, safeguarding…...

oFono 安全漏洞

oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono that stems from a heap-based buffer overflow elevation of privilege vulnerability found in the SimToolKit module...

oFono 安全漏洞

oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono that stems from a stack-based buffer overflow code execution vulnerability found in the CUSD module...