CVE-2017-16117

slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds...

CVE-2017-16117

The CVE-2017-16117 issue affects the slug module (slugify strings, including unicode). Affected component: slug's regex-based parser vulnerable to Denial of Service when processing untrusted input. Impact: parsing untrusted input can cause the event loop to block for about 2 seconds, typically at...

PT-2018-6144

Name of the Vulnerable Software and Affected Versions: slug versions prior to 0.9.2 Description: The issue concerns a regular expression denial of service in the slug module when specially crafted untrusted input is passed. This can cause the event loop to block for 2 seconds with approximately...

CVE-2017-16117: Uncontrolled Resource Consumption

slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

PT-2018-17640

Name of the Vulnerable Software and Affected Versions Event Manager version 1.0 Description A SQL Injection issue exists, allowing potential exploitation via the id parameter in the "event.php" endpoint or the slug parameter in the "page.php" endpoint. Recommendations For Event Manager version 1....

CVE-2018-6576: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2017-12068: Improper Neutralization of Input During Web Page Generation

The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an eladmincategories deletebulk action...

PT-2017-12333

Name of the Vulnerable Software and Affected Versions Event List plugin version 0.7.9 Description The issue concerns a problem with the slug array parameter in the wp-admin/admin.php endpoint, specifically in the el admin categories delete bulk action, allowing for XSS. Recommendations For Event...

METAL SLUG DEFENSE - Dangerous filesystem permissions, GPL license, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application METAL SLUG DEFENSE published at the 'play' market has multiple vulnerabilities...

DEBIAN-CVE-2015-5144

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

PYSEC-2015-10

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

PYSEC-2015-10

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

UBUNTU-CVE-2015-5144

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

CVE-2014-4564: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter...

PT-2014-5979

Name of the Vulnerable Software and Affected Versions Validated plugin versions 1.0.2 and earlier for WordPress Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the slug parameter in the check.php file...

CVE-2012-6633

Cross-site scripting XSS vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field...

DEBIAN-CVE-2012-6633

Cross-site scripting XSS vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field...