BIT-GITLAB-2024-2191 Improper Access Control in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only...

PT-2024-37578

Name of the Vulnerable Software and Affected Versions lahirudanushka School Management System versions 1.0.0 through 1.0.1 Description A vulnerability was found in the lahirudanushka School Management System, affecting some unknown processing of the file /subject.php of the component Subject Page...

CVE-2024-6374: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site...

CVE-2024-2191: Improper Access Control

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only...

Exploit for Cross-site Scripting in Fikeulous Simpcms

Exploit Title: SimpCMS v0.1 - Cross Site Scripting XSS C...

PT-2024-4738

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.9 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description: An issue in GitLab CE/EE allows a merge request title to be visible publicly despite being set as...

Malicious code in down_load_ebook_se_incontri_il_buddha_per_strada_uccidilo_by_sheldon_b_kopp_0gwqq (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_maqtal_hossein_tragedin_i_karbala_by_den_vantades_vanner_4ulx6 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in accion-devolucions-john-wick-keanu-reeves-accion-en-casa-la-mejor-neova-pelicula-publicada--en-casa-en-lienia-lliena-love (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 5.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 1.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Robo Gallery plugin <= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Image Title vulnerability discovered by Tim Coen in WordPress Plugin Robo Gallery versions = 3.2.19...

PT-2024-28285

Name of the Vulnerable Software and Affected Versions Rbs Image Gallery plugin for WordPress versions up to, and including, 3.2.19 Description The issue is related to Stored Cross-Site Scripting via an Image Title due to insufficient input sanitization and output escaping. This allows authenticat...

CVE-2024-3894: Improper Neutralization of Input During Web Page Generation

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an Image Title in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

CVE-2024-38395

In iTerm2 versions prior to 3.5.2 , the "Terminal may report window title" setting is not honored, which could potentially lead to remote code execution . Although the vulnerability is noted as not trivially exploitable , it poses a significant security risk. To remediate this issue, users should...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

iTerm2 Security Vulnerability

iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability in iTerm2 version 3.5.x prior to 3.5.2, which originates from the unfiltered use of escape sequences to report window titles, allows an attacker to inject arbitrary code into the terminal...

PT-2024-27980 · Iterm2 · Iterm2

Name of the Vulnerable Software and Affected Versions: iTerm2 versions 3.5.x through 3.5.1 Description: An issue was discovered in iTerm2 that allows an attacker to inject arbitrary code into the terminal by abusing title reporting and tmux integration. This is possible due to the unfiltered use ...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...