Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The software supports IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla Thunderbird, which can be...

prettywildseeds.co.uk Cross Site Scripting vulnerability OBB-2214621

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OTRS 信息泄露漏洞

OTRS is an application from the German company OTRS. A service management software. An information disclosure vulnerability exists in OTRS AG OTRS Community Edition, which arises from the generation of support packages that contain private S MIME and PGP keys if the containing folder is not hidde...

The vulnerability of the Thunderbird email client, related to errors in processing OpenPGP cryptographic signatures, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Thunderbird email client is related to errors in processing OpenPGP cryptographic signatures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of Thunderbird email client, related to incorrect verification of the OpenPGP cryptographic signature, allows attackers to gain access to protected information.

The vulnerability of the Thunderbird email client is related to an improper verification of the OpenPGP cryptographic signature. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

Remote code execution

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

GHSA-P493-635Q-R6GR Remote code execution via the `pretty` option.

Impact If a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remote code execution on the node.js backend. Patches Upgrad...

Pug 注入漏洞

Pug is Pug open source an application . Provides ways to optimize html. Pug has an injection vulnerability that can be exploited by an attacker to compile the pretty option of the compiler...

SAP Process Integration Information Disclosure Vulnerability

SAP Process Integration is SAP's Enterprise Application Integration EAI software for seamless integration between SAP and non-SAP applications in a company or with systems external to the company. An information disclosure vulnerability exists in SAP Process Integration 1.0. An attacker could...

WordPress Pretty-Link Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. A cross-site scripting vulnerability exists in WordPress Pretty-Link versi...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

Cross site scripting

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2011-4595

CVE-2011-4595 concerns the Pretty-Link WordPress plugin. The vulnerability is a cross‑site scripting (XSS) flaw in the plugin’s language around the URL parameter of the pretty-bar.php script, allowing an attacker to inject arbitrary HTML/JavaScript into a user’s browser. Affected product/version:...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

WordPress pretty-link plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogs using PHP language development guest platform. The platform supports setting up personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. WordPress pretty-link plugin version 1.6.8 before the...

Sql injection

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::listlinks SQL injection via the group parameter...

CVE-2015-9457

CVE-2015-9457 : The WordPress "pretty-link" plugin (before 1.6.8) contains a SQL injection in PrliLinksController::list_links that is exploitable via the group parameter. Public sources in connected documents confirm this as an authenticated SQL injection vulnerability affecting Pretty Link plugi...

WordPress Shortlinks by Pretty Links plugin <= 2.1.9 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Jerome Bruandet in WordPress Shortlinks by Pretty Links plugin versions = 2.1.9. Solution Update the WordPress Shortlinks by Pretty Links plugin to the latest available version at least 2.1.10...

Shortlinks by Pretty Links <= 2.1.9 - Stored XSS and CSV Injection

Details in the reference...

UBUNTU-CVE-2019-12269

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text...