838 matches found
October Code Injection Vulnerability
October is an open source Content Management System CMS and web platform from October. October is vulnerable to a code injection vulnerability that originates when "editor.cmspages", "editor.cmslayouts" or "editor.cmsparticles" is enabled with "cms.safemode". editor.cmspages", "editor.cmslayouts"...
October Code Injection Vulnerability
October is an open source Content Management System CMS and web platform from October. October suffers from a code injection vulnerability, which originates from the use of "editor.cmspages", "editor.cmslayouts" or "editor.cmsparticles" with "cms.safemode" enabled. editor.cmspages",...
Template Injection
October CMS is vulnerable to Template Injection. The vulnerability is caused by a crafted request which includes PHP code in the CMS template, where an authenticated backend user possessing the editor.cmspages, editor.cmslayouts, or editor.cmspartials can execute arbitrary PHP code even when the...
October CMS safe mode bypass using Twig sandbox escape
Impact An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.safemode being enabled can write specific Twig code to escape the Twig sandbox and execu...
GHSA-P8Q3-H652-65VX October CMS safe mode bypass using Twig sandbox escape
Impact An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.safemode being enabled can write specific Twig code to escape the Twig sandbox and execu...
GHSA-Q22J-5R3G-9HMH October CMS safe mode bypass using Page template injection
Impact An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.safemode being enabled can craft a special request to include PHP code in the CMS...
PT-2023-29217 · October · October
Name of the Vulnerable Software and Affected Versions: October versions prior to 3.4.15 Description: The issue allows an authenticated backend user with the editor.cms pages, editor.cms layouts, or editor.cms partials permissions to write specific Twig code and execute arbitrary PHP, despite...
Foreman: Arbitrary code execution through templates
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...
CVE-2023-36621
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...
CVE-2023-36621
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...
CVE-2023-36621
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...
Code injection
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...
CVE-2023-36621
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...
CVE-2023-36621
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...
Boomerang Parental Control Security Vulnerability
Boomerang Parental Control is an application from Boomerang for parents to restrain their children from using electronic devices. A security vulnerability exists in the Boomerang Parental Control application prior to version 13.83 Android, which stems from the ability to use Safe Mode to...
CVE-2023-36621
CVE-2023-36621 affects Boomerang Parental Control App (Android) up to version 13.83. Multiple connected sources describe a stored XSS and privilege escalation vulnerability in versions prior to 13.83, with at least one issue fixed in 13.83 or later. SEC Consult and PacketStorm indicate the vulner...
Foreman: Arbitrary code execution through templates
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...
Foreman: Arbitrary code execution through templates
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...
CVE-2023-28373
A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...