CVE-2019-12434

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...

CVE-2019-12434

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...

CVE-2019-12434

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...

CVE-2019-12434: Use of Insufficiently Random Values

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...

PT-2020-9320

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 10.6 through 11.11 Description: An issue allows users to guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments, leading to Information...

CVE-2020-8641

Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pageslug parameter...

PT-2020-20250

Name of the Vulnerable Software and Affected Versions Lotus Core CMS version 1.0.1 Description The issue allows authenticated Local File Inclusion of .php files via directory traversal in the page slug parameter of the index.php page. Recommendations For Lotus Core CMS version 1.0.1, consider...

CVE-2019-9553

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

CVE-2019-9553

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

PT-2019-19704

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

CVE-2019-9553: Improper Neutralization of Input During Web Page Generation

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

CVE-2019-17433

z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen...

Code injection

z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen...

WolfCMS Cross-Site Scripting Vulnerability (CNVD-2018-16505)

WolfCMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in WolfCMS version 0.8.3.1, which stems from th...

CVE-2018-15842

WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter...

PT-2018-13231

Name of the Vulnerable Software and Affected Versions WolfCMS version 0.8.3.1 Description The issue is related to a security problem where an attacker can inject malicious code. The /admin/page/add endpoint is affected, specifically through the slug parameter. Recommendations For WolfCMS version...

CVE-2018-15842: Improper Neutralization of Input During Web Page Generation

WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter...

@botsbotsbots/botbuilder (>=0.1.0-latest.1a450bb3, <=0.5.0-latest.e3c9593d), @chronosmicro/display (12.0.1) +178 more potentially affected by CVE-2017-16117 via slug (>=0.1.1, <=0.9.1)

slug NPM version =0.1.1, =0.1.0-latest.1a450bb3, =1.1.1, =0.5.1, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.8, =1.1.7, =0.1.0, =0.4.6 and more Source cves: CVE-2017-16117 Source advisory: OSV:GHSA-JXQQ-CQM6-PFQ9...

GHSA-JXQQ-CQM6-PFQ9 Regular Expression Denial of Service in slug

Affected versions of slug are vulnerable to a regular expression denial of service when parsing untrusted user input. The issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds, About 50k characters can block the event loop for 2 seconds. Recommendatio...

slug denial of service vulnerability

slug is a module capable of blocking strings. A security vulnerability exists in slug. An attacker could exploit this vulnerability to cause a denial of service with untrustworthy specially crafted input...