149 matches found
CVE-2019-17427
CVE-2019-17427 CVE-2019-17427 지속적 XSS POC Redmine 3.4.11 이전 및 4.0.x 4.0.4 이전 버전에서 textile 포맷팅 오류로 인해 지속적 XSS가 존재합니다. 이 취약점은 기본적으로 textile 포맷팅을 사용하는 모든 wiki 페이지에 존재합니다. pre 매개변수를 사용하여 이를 악용할 수 있습니다. pre onfocusin=alert"pwnd" tabindex=1 style="height:500px;width:500px;" class= 이를 완전히 악용하려면 XSS 예제...
EUVD-2016-1697
Malware in sbrugna...
EUVD-2020-23849
Malware in sbrugna...
EUVD-2019-7819
Malware in sbrugna...
EUVD-2019-11478
Malware in sbrugna...
EUVD-2022-47573
Malicious code in bioql PyPI...
EUVD-2023-51390
Malicious code in bioql PyPI...
EUVD-2022-46993
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-36307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. CVE-2020-36307 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2023-47259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter. CVE-2023-47259 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2022-44637
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields...
Linux Distros Unpatched Vulnerability : CVE-2022-44031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in...
Linux Distros Unpatched Vulnerability : CVE-2016-10515
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages. CVE-2016-10515 Note that...
Bottinelli Informatical Vedo Suite Server-Side Request Forgery Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. Bottinelli Informatical Vedo Suite suffers from a server-side request forgery vulnerability, which originates from the /apivedo/video/preview endpoint that do...
Linux Distros Unpatched Vulnerability : CVE-2019-25026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting. CVE-2019-25026 Note that Nessus relies on the presence of the packa...
Bottinelli Informatical Vedo Suite 安全漏洞
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An access control error vulnerability exists in Bottinelli Informatical Vedo Suite, which can be exploited by an attacker to obtain an elevated privilege JWT...
Bottinelli Informatical Vedo Suite 安全漏洞
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An information disclosure vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from plaintext credentials stored in the...
CVE-2023-47259
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...
CVE-2022-44637
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user...