7428 matches found
[SECURITY] Fedora 31 Update: python-nltk-3.4.5-2.fc31
NLTK is a Python package that simplifies the construction of programs that process natural language; and defines standard interfaces between the different components of an NLP system. It was designed primarily to help teach graduate and undergraduate students about computational linguistics; but ...
GitLab Input Validation Error Vulnerability (CNVD-2020-190200)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...
GitLab Information Disclosure Vulnerability (CNVD-2020-19019)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...
CVE-2020-10083
GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied...
CVE-2019-12434
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
Input validation
An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation. Restricted visibility settings allow creating internal projects in private groups, leading to multiple permission issues...
Information disclosure
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
CVE-2019-12434
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
CVE-2019-12434
CVE-2019-12434 affects GitLab Community and Enterprise Edition 10.6–11.11. An information-disclosure flaw allows an attacker to guess private project URL slugs by comparing destination URLs of issues linked in comments. The root cause is exposure through comment-linked issue destinations, enablin...
CVE-2019-12434
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
CVE-2019-12434
Removed by vendor...
CVE-2019-12433
Removed by vendor...
PT-2020-9319
Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.7 through 11.11 Description: The issue is related to improper input validation, allowing the creation of internal projects in private groups with restricted visibility settings. This leads t...
GitLab Access Control Error Vulnerability (CNVD-2020-16706)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An access...
Spring Projects Linux Detection
Binary data pivotalsoftwarespringprojectslinuxinstalled.nbin...
Spring Projects Windows Detection
Binary data pivotalsoftwarespringprojectswininstalled.nbin...
U.S. Dept Of Defense: IDOR - Delete Users Saved Projects
Target Url https://█████/██████████/█████████=Targetid Summary: Hello, I found an IDOR bug in deleting users saved projects. Through changing the search id in the above url in a GET request, you can delete saved projects for any users. Step-by-step Reproduction Instructions 1. Navigate to your...
SOPlanning 1.45 - (by) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali...
SOPlanning 1.45 - by SQL Injection
SOPlanning 1.45 - by SQL Injection Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali...
