4718 matches found
aiohttp-session Session Fixation vulnerability
The pypi package aiohttp-session before 2.4.0 contained a Session Fixation vulnerability in loadsession function for RedisStorage that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies ?session=, or meta tags or script tags wi...
GitLab: Bypass of GitLab CI runner slash fix in YAML validation
Hi Gitlab Security, I notice the bug 301432 that Jobert reported earlier is could be bypassed by setting variable in environment. The reason is that the fix in place preventing url normalization is performed by doing the YAML validation, however this could be bypassed by setting the environment...
Microsoft Windows: Script Execution
This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run. If you enable this policy setting, the scripts selected in the drop-down list are allowed to run. The Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpte...
Cross site request forgery (csrf)
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftpsave...
CVE-2018-16732
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftpsave...
PT-2018-13710
Name of the Vulnerable Software and Affected Versions CScms version 4.1 Description The issue concerns a CSRF vulnerability in the Setting.php file within the CScms software. This vulnerability can be exploited via the "admin.php/setting/ftp save" endpoint. Recommendations For CScms version 4.1,...
CVE-2018-16732: Cross-Site Request Forgery (CSRF)
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftpsave...
Cross site request forgery (csrf)
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html...
CVE-2018-16449
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html...
CVE-2018-16370
In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive...
CVE-2018-16370: Unrestricted Upload of File with Dangerous Type
In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive...
CVE-2018-16337
An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save...
Design/Logic Flaw
ChemCMS 1.0.6 has XSS via the "setting - website information" field...
PT-2018-13506
Name of the Vulnerable Software and Affected Versions ChemCMS version 1.0.6 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the "setting - website information" field, which allows for the injection of malicious scripts. Recommendations For ChemCMS version...
CVE-2018-16337: Cross-Site Request Forgery (CSRF)
An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save...
PT-2018-13499
Name of the Vulnerable Software and Affected Versions Cscms version 4.1.8 Description An issue was discovered that allows modification of a website's basic configuration via a CSRF vulnerability. This can be exploited through the "upload/admin.php/setting/save" API endpoint. Recommendations For...
CVE-2018-16346: Improper Neutralization of Input During Web Page Generation
ChemCMS 1.0.6 has XSS via the "setting - website information" field...
CVE-2018-13391
The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and from version 7.11.0 before version 7.11.2 allows remote...
Microsoft Windows: Audit System Integrity
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsystemintegrity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit System Integrity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Microsoft Windows: Audit PNP Activity
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpnpactivity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit PNP Activity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...