7428 matches found
CVE-2020-13270
Removed by vendor...
PT-2020-13411 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.3 through 13.0.1 Description: A missing permission check on fork relation creation in GitLab CE/EE allows guest users to create a fork relation on restricted public projects via the API. Recommendations: For GitLab...
Bridging the Cloud Communication Gap. #LetsTalkCloud
The conversation between you and your Board of Directors is not always a walk in the park. With more and more cloud projects coming your way, it’s time to change the conversation to speak their language and start smoothing out the journey...
Vulnerability Spotlight: Multiple vulnerabilities in Siemens LOGO! PLC
Alexander Perez-Palma of Cisco Talos and Emanuel Almeida of Cisco Systems discovered these vulnerabilities. Blog by Jon Munshaw. Cisco researchers recently discovered several vulnerabilities in the Siemens LOGO! PLC. The LOGO! allows users to control various automation projects, such as industria...
June 2, 2020, update for Office 2016 (KB4484335)
None None...
Server side request forgery (ssrf)
Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svnurl parameter...
CVE-2014-8943
Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svnurl parameter...
CVE-2014-8945
CVE-2014-8945 affects Lexiglot, a PHP-based translation platform. The vulnerability is a command injection in admin.php?page=projects, exploitable through the username and password fields. Multiple sources confirm the issue, noting it affects Lexiglot releases up to and including 2014-11-20. The ...
CVE-2014-8945
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...
CVE-2014-8945: Improper Neutralization of Special Elements used in an OS Command
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...
PT-2020-7768
Name of the Vulnerable Software and Affected Versions: Lexiglot versions through 2014-11-20 Description: The issue allows command injection via the username and password fields in the "admin.php?page=projects" endpoint. Recommendations: For versions through 2014-11-20, update to a version release...
PT-2020-7766
Name of the Vulnerable Software and Affected Versions: Lexiglot versions prior to 2014-11-20 Description: The issue allows for Server-Side Request Forgery SSRF via the svn url parameter in the admin.php?page=projects endpoint. This means an attacker could potentially force the server to make...
Python and Go Top the Chart of 2019’s Most Popular Hacking Tools
Imperva Cloud WAF protects over a hundred thousand websites globally and observes around a billion of attacks daily. We detect thousands of hacking tools on a daily basis and employ various measures to stop malicious requests. Here are the most dangerous tools and attacks we discover while...
GitLab: Possibilty to purchase Ultimate - 1 Year (EDU or OSS)
Hi, Any user can purchase Ultimate - 1 Year EDU or OSS which is for educational institutions or open source projects.I have found here https://gitlab.com/gitlab-org/customers-gitlab-com/-/issues/860 list of Gitlab plan id and found Ultimate - 1 Year which is free and purchased. Steps to reproduce...
Gym Management System 1.0 Remote Code Execution
Exploit Title: Gym Management System v1.0 - Unauthenticated Remote Code Execution Exploit Author: Bobby Cooke Date: May 21th, 2020 Vendor Homepage: https://projectworlds.in/ Software Link: https://projectworlds.in/free-projects/php-projects/gym-management-system-project-in-php/ Version: 1.0 Teste...
Filter for custom field values shows all options from all contexts
h3. Summary If a custom field is added to a Portfolio plan, the Portfolio filter will show all options from all contexts configured in the custom field in Jira. h3. Steps to Reproduce Create a custom field with multiple contexts and values across contexts. Assign different projects to separate...
Visma Public: Ability to delete projects from Archived companies (Read only version)
The researcher discovered that Projects can be deleted from Archived companies which have "read only version".It was assessed as Low impact...
SFO Websites Hacked: Airport Discloses Data Breach
The San Francisco International Airport SFO disclosed this week two of its websites had been hacked and lead to the disclosure of some users’ login credentials at both sites. The attacks occurred in March and compromised were SFOConnect.com and SFOConstruction.com, both relatively low-traffic...
