CVE-2021-21353

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

GHSA-P493-635Q-R6GR Remote code execution via the `pretty` option.

Impact If a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remote code execution on the node.js backend. Patches Upgrad...

Pug 注入漏洞

Pug is Pug open source an application . Provides ways to optimize html. Pug has an injection vulnerability that can be exploited by an attacker to compile the pretty option of the compiler...

SAP Process Integration Information Disclosure Vulnerability

SAP Process Integration is SAP's Enterprise Application Integration EAI software for seamless integration between SAP and non-SAP applications in a company or with systems external to the company. An information disclosure vulnerability exists in SAP Process Integration 1.0. An attacker could...

WordPress Pretty-Link Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. A cross-site scripting vulnerability exists in WordPress Pretty-Link versi...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

Cross site scripting

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2011-4595

CVE-2011-4595 concerns the Pretty-Link WordPress plugin. The vulnerability is a cross‑site scripting (XSS) flaw in the plugin’s language around the URL parameter of the pretty-bar.php script, allowing an attacker to inject arbitrary HTML/JavaScript into a user’s browser. Affected product/version:...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

WordPress pretty-link plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogs using PHP language development guest platform. The platform supports setting up personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. WordPress pretty-link plugin version 1.6.8 before the...

Sql injection

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::listlinks SQL injection via the group parameter...

CVE-2015-9457

CVE-2015-9457 : The WordPress "pretty-link" plugin (before 1.6.8) contains a SQL injection in PrliLinksController::list_links that is exploitable via the group parameter. Public sources in connected documents confirm this as an authenticated SQL injection vulnerability affecting Pretty Link plugi...

WordPress Shortlinks by Pretty Links plugin <= 2.1.9 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Jerome Bruandet in WordPress Shortlinks by Pretty Links plugin versions = 2.1.9. Solution Update the WordPress Shortlinks by Pretty Links plugin to the latest available version at least 2.1.10...

Shortlinks by Pretty Links <= 2.1.9 - Stored XSS and CSV Injection

Details in the reference...

UBUNTU-CVE-2019-12269

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text...

Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks

A team of security researchers has discovered several vulnerabilities in various implementations of OpenPGP and S/MIME email signature verification that could allow attackers to spoof signatures on over a dozen of popular email clients. The affected email clients include Thunderbird, Microsoft...

WordPress Fastest Cache 0.8.9.0 Arbitrary File Deletion Exploit

WordPress WP Fastest Cache plugin versions 0.8.9.0 and below suffer from an arbitrary file deletion vulnerability. The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a...

PRETty - "PRinter Exploitation Toolkit" LAN Automation Tool

PRETty is useful when a large number of printers are present on a network. Instead of scanning, logging, and manually running PRET againt each individual printer, PRETty will automatically discover and run choosen PRET payloads against all printers on the target network. Additionally, PRETty can ...

Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-006) - Linux

Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails

Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 52.9...