jenkins-plugin-workflow-cps: Sandbox bypass in Script Security Plugin and Pipeline: Groovy Plugin (SECURITY-1353)

A flaw was found in the Jenkins Workflow CPS plugin. Groovy Plugins could be circumvented through methods supporting type casts and type coercion allowing attackers to invoke constructors for arbitrary types. The highest threat from this vulnerability is to data confidentiality and integrity as...

Cross-site Scriptin in JSPWiki

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable...

Server side request forgery (ssrf)

An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php file, as demonstrated by a PoC.php created by the guest account, with execution via a...

CVE-2019-9642

CVE-2019-9642 affects pydio-core up to version 8.2.2 in the proxy.php module; an unauthenticated request allows evaluating and executing malicious PHP code via a PoC placed on the fourth line of a .php file, with execution triggered through a crafted proxy.php?hash=../../../../../var/lib/pydio/da...

PT-2019-19770

Name of the Vulnerable Software and Affected Versions Pydio versions through 8.2.2 Description An issue was discovered in Pydio where it is possible to evaluate malicious PHP code through an unauthenticated request. This can be achieved by placing the malicious code on the fourth line of a .php...

CVE-2019-9642: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php file, as demonstrated by a PoC.php created by the guest account, with execution via a...

PT-2019-12805

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2019.06.01 Description The issue allows directory listing in the customizables/plugins/audio player directory. This has been fixed in a later version. Recommendations For versions prior to 2019.06.01, update to versio...

CVE-2019-12459: Improper Limitation of a Pathname to a Restricted Directory

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

EulerOS 2.0 SP2 : gstreamer-plugins-base (EulerOS-SA-2019-1577)

According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server,...

EulerOS 2.0 SP3 : gstreamer-plugins-base (EulerOS-SA-2019-1578)

According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server,...

EulerOS 2.0 SP5 : gstreamer-plugins-base (EulerOS-SA-2019-1579)

According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server,...

Authorization

Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization...

CVE-2017-8777

Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization...

CVE-2017-8777

Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization...

CVE-2017-8777

CVE-2017-8777 affects Open-Xchange GmbH OX Cloud Plugins (versions 1.4.0 and earlier). The root cause is Missing Authorization, as described across multiple feeds (NVD/Red Hat/CVE). The connected documents do not provide explicit exploitation details or a confirmed remediation version in the supp...

CVE-2017-8777

Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization...

CVE-2017-8777: Improper Authorization

Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization...

PT-2019-8641

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX Cloud Plugins version 1.4.0 and earlier Description The issue is related to missing authorization. Recommendations For Open-Xchange GmbH OX Cloud Plugins version 1.4.0 and earlier, update to a version later than 1.4.0 to...

WordPress WPGraphQL 0.2.3 Authentication Bypass / Information Disclosure

!/usr/bin/env python Author: Simone Quatrini of Pen Test Partners CVEs: 2019-9879, 2019-9880, 2019-9881 Tested on Wordpress 5.1.1 and wp-graphql 0.2.3 https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/ import argparse import requests import base64 import json import sys parse...

CVE-2019-10078

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable...