p5-ssl-tools

Collection of SSL Tools This repository contains various tools, which are intended to debug or analyze problems related to SSL/TLS. Analyzing state of TLS analyze-ssl.pl check support for various SSL/TLS version check which ciphers are support verfiy certificate check OCSP state check if SNI is...

FreeBSD : p5-YAML-Syck -- Multiple vulnerabilities (501ff33c-b996-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 501ff33c-b996-11f1-ad2b-40b034429ecf advisory. YAML-Syck project reports: YAML-Syck 1.47 fix the following issues: Tenable has extracted the...

FreeBSD : p5-Authen-SASL -- Replay attack in Authen::SASL::Perl::DIGEST_MD5 (023a3d0c-b987-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 023a3d0c-b987-11f1-ad2b-40b034429ecf advisory. Authen-SASL project reports: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

FreeBSD : databases/p5-DBI -- multiple vulnerabilities (675bc714-b8cd-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 675bc714-b8cd-11f1-ad2b-40b034429ecf advisory. DBI project reports: DBI 1.650, 1.651, 1.652, 1.653 and 1.654 fix the following issues: Tenabl...

FreeBSD : p5-Image-ExifTool -- code injection via crafted media (bba381b5-b842-11f1-8205-107c614c014e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bba381b5-b842-11f1-8205-107c614c014e advisory. ExifTool versions up to 13.53 contain a code injection flaw in the Processmrld function of...

p5-Dancer2 -- Multiple vulnerabilities

Dancer project reports: Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not...

FreeBSD : p5-Dancer2 -- Multiple vulnerabilities (5e6fe0cf-b655-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5e6fe0cf-b655-11f1-ad2b-40b034429ecf advisory. Dancer project reports: Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying...

FreeBSD : p5-Dancer2 -- Multiple vulnerabilities (6690917c-b657-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6690917c-b657-11f1-ad2b-40b034429ecf advisory. Dancer project reports: Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from...

CLSA-2026-1787229037 TuxCare security update for laravel/framework (1 CVE)

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.8.38-p5+tuxcare...

CLSA-2026-1783904621 TuxCare security update for craftcms/cms (1 CVE)

TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p5+tuxcare...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can bypass security measures and gain unauthorized read access by leveraging high privileges without...

CVE-2026-14736

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file userauthcommit.php. Performing a manipulation of the argument uploadimage results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization in the authorization process. An attacker can gain unauthorized write access by bypassing security measures. Remediation Upgrade...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can gain unauthorized write access by bypassing security measures. Remediation Upgrade...

p5-Image-ExifTool -- code injection via crafted media

ExifTool versions up to 13.53 contain a code injection flaw in the Processmrld function of lib/Image/ExifTool/GM.pm, reached while parsing JPEG, QuickTime, MOV and MP4 files. When exiftool is invoked with the -ee extract embedded option on a crafted file, a local attacker with low privileges can...

Oracle Linux 10 : sudo (ELSA-2026-10758)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-10758 advisory. 1.9.15-10.p5 - Resolves: RHEL-164619 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls Tenable has extracted the...

sql-injection-corpus

SQL Injection Corpus - User Guide Overview This corpus con...

P5 FNIP-8x16A和P5 FNIP-4xSH 跨站脚本漏洞

The P5 FNIP-8x16A and P5 FNIP-4xSH are Ethernet relay controllers produced by the British company P5. Both versions of P5 FNIP-8x16A and P5 FNIP-4xSH, as well as the 1.0.11 version, have a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of multiple GET/POST...

CVE-2020-37118: Cross-Site Request Forgery (CSRF)

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking...

CVE-2020-37148: Improper Neutralization of Input During Web Page Generation

P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability. Input passed to several GET/POST parameters is not properly sanitized before being returned to the user, allowing attackers to execute arbitrary HTML and script code in a user's browser...