Cross site scripting

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting XSS vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you...

[SECURITY] Fedora 40 Update: CardManager-3-29.fc40

This is free, open source multiplatform java application which allows you to play ANY card game. The game is designed especially to play collectible card games like Magic the Gathering or Doomtrooper over network. To play those games you need to own scanned images of card, which are not p art of...

Arbitrary Code Execution

RPyC is vulnerable to arbitrary code execution. The vulnerability is due to a flaw in the handling of the array attribute specifically when the server-side exposes a method that calls the attribute array for a client provided netref e.g., np.arrayclientnetref. A remote attacker can exploit this b...

CVE-2024-27307

JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...

CVE-2024-27307 JSONata expression can pollute the "Object" prototype

JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...

CVE-2024-27307 JSONata expression can pollute the "Object" prototype

JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...

CVE-2024-27307 JSONata expression can pollute the "Object" prototype

JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...

Cross Site Scripting

concrete5/concrete5 is vulnerable to Cross Site Scripting. The vulnerability is due to insufficient validation of administrator-provided data in the Name field of a Group type, allowing a rogue administrator to inject malicious code. This code may execute when users visit the affected page...

JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from an authentication bypass vulnerability. No details of the vulnerability are provided at this time...

Object Constructor And Prototype Override

jsonata is vulnerable to Object Constructor And Prototype Override. The vulnerability is due to a malicious expression leveraging the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution, or other unexpected...

Vulnerabilities fixed in Arista EOS

Arista has fixed a vulnerability in Arista NG Firewall, part of Arista EOS Edge Threat Management. The vulnerability allows a malicious person with access rights to 'advanced report application' could, through SQL injection, execute code with elevated privileges to execute code on the underlying...

PT-2024-21226 · Unknown · Change Table Prefix

Name of the Vulnerable Software and Affected Versions: Change Table Prefix versions through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the...

GHSA-Q6H8-4J2V-PJG4 Minder trusts client-provided mapping from repo name to upstream ID

Summary When using a modified client or the grpc interface directly, the RegisterRepository call accepts both the repository owner / repo and the repoid. Furthermore, these two are not checked for matching before registering webhooks and data in the database. Details It is possible for an attacke...

CAN-2004-0151

CVE-2004-0151 corresponds to a local privilege escalation in xitalk, affecting xitalk packages 1.1.11 and earlier. Debian’s DSA-462-1 notes a missing privilege release that allows a local user to execute arbitrary commands under the GID utmp, potentially removing traces from utmp. Remediation per...

CAN-2004-1170

CVE-2004-1170 affects the a2ps package (notably versions around 4.13). The connected sources describe a vulnerability where an attacker can leverage shell metacharacters in a file name to execute arbitrary commands remotely, due to insecure handling of the filename in the tool’s processing (e.g.,...

CAN-2005-1260

The CAN-2005-1260 entry concerns bzip2 up to version 1.0.2 (and earlier). A crafted bzip2 file can trigger an infinite loop during decompression, leading to denial of service by exhausting disk space or CPU time. Several connected advisories confirm impact is via decompression of untrusted archiv...

GHSA-Q3GG-M8HR-H4X4

creationtimestamp| type| source ---|---|--- 2024-02-21 01:16:50+00:00| seen| https://t.me/ctinow/189072 2024-02-21 13:59:02+00:00| seen| https://t.me/arpsyndicate/3788...

Employee Management System v1 - (email) SQL Injection Vulnerability

Exploit Title: Employee Management System v1 - 'email' SQL Injection Application: Employee Management System Date: 19.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Employee Management System v1 - 'email' SQL Injection

Exploit Title: Employee Management System v1 - 'email' SQL Injection Google Dork: N/A Application: Employee Management System Date: 19.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2022-23084

The total size of the user-provided nmreq to nmreqcopyin was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could lead to kernel memory corruption. On systems configured to include netmap in their devfsruleset, a privileged process running in a jail can...