247 matches found
How Tesla and HyperLoop accelerations help people with rocket flights
We don’t need that crazy acceleration for Tesla cars and Hyperloop for daily life in a few words. It’s a lot of fun, for sure, and some marketing feature that puts electric cars in supercars bucket. At the same time, that crazy acceleration train people to take overloads. In my personal experienc...
CVE-2010-2446
Rbot Reaction plugin allows command execution...
Command injection
Rbot Reaction plugin allows command execution...
CVE-2010-2446
Rbot Reaction plugin allows command execution...
CVE-2010-2446
CVE-2010-2446 is described across multiple sources as a remote command-execution vulnerability tied to the Rbot Reaction plugin. The connected documents do not provide concrete technical details such as affected products/versions, root cause, exploit code, or remediation steps. Exploitation statu...
PT-2019-6540
Name of the Vulnerable Software and Affected Versions Rbot Reaction plugin affected versions not specified Description The issue allows command execution. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2010-2446: Improper Input Validation
Rbot Reaction plugin allows command execution...
Design/Logic Flaw
An issue was discovered in GitLab Community and Enterprise Edition 8.x starting in 8.9, 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility...
CVE-2019-7176
An issue was discovered in GitLab Community and Enterprise Edition 8.x starting in 8.9, 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility...
CVE-2019-7176
Removed by vendor...
CVE-2019-7176: Undefined Security Weakness
An issue was discovered in GitLab Community and Enterprise Edition 8.x starting in 8.9, 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility...
PT-2019-18456
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 8.9 through 11.7.x GitLab Community and Enterprise Edition versions 11.6.x through 11.6.6 GitLab Community and Enterprise Edition versions 11.7.x through 11.7.1 Description The issue concerns...
FreeBSD : Gitlab -- Multiple vulnerabilities (467b7cbe-257d-11e9-8573-001b217b3468)
Gitlab reports : Remote Command Execution via GitLab Pages Covert Redirect to Steal GitHub/Bitbucket Tokens Remote Mirror Branches Leaked by Git Transfer Refs Denial of Service with Markdown Guests Can View List of Group Merge Requests Guest Can View Merge Request Titles via System Notes Persiste...
CVE-2018-7197
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting XSS vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL...
CVE-2018-7197
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting XSS vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL...
CVE-2018-7197
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting XSS vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL...
PT-2018-17943
Name of the Vulnerable Software and Affected Versions Pluck versions prior to 4.7.5 Description A stored cross-site scripting issue allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL. Recommendations For versions prior to...
CVE-2018-7197: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting XSS vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL...
Someone Stole Almost Half a BILLION Dollars from Japanese Cryptocurrency Exchange
Coincheck, a Tokyo-based cryptocurrency exchange, has suffered what appears to be the biggest hack in the history of cryptocurrencies, losing $532 million in digital assets nearly $420 million in NEM tokens and $112 in Ripples. In 2014, Mt Gox, one of the largest bitcoin exchange at that time,...
When the network sharp knives of the data stream due to the vulnerability to bypass the egg stream......- Vulnerability warning-the black bar safety net
On Friday, the network sharp knife security team of the rivers and lakes known as the“data stream”of handsome handsome in the Black clouds submitted a vulnerability, in fact, in the clouds on submitted vulnerabilities is also not what big things, but the key is: ! Smart devices small love love...