CVE-2021-3129

CVE-2021-3129 Laravel 디버그 RCE 사용 방법 docker-compse up -d를 실행하여 환경을 시작합니다 8888 포트에 접속한 후 홈페이지의 generate key를 클릭하면 재현할 수 있습니다 Docker 환경에 대해 몇 가지 말씀드리자면: .env.example을 .env로 복사하여 디버그 환경을 활성화합니다 php.ini의 phar.readonly를 비활성화했습니다 resources/view/에 hello 템플릿을 추가하고 정의되지 않은 변수를 참조했으며, 동시에 routes/web.php에 라우...

EUVD-2013-1491

Malware in sbrugna...

EUVD-2010-3357

Malware in sbrugna...

CVE-2023-2968

A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception...

Code injection

A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception...

Fedora 22 : php-horde-Horde-Service-Weather-2.3.1-1.fc22 / php-horde-Horde-Core-2.22.4-1.fc22 / etc (2015-d799a5e72b)

HordeCore 2.22.4 mjr SECURITY: Fix XSS in HordeCoreVarRendererHtml reported by Centurion Information Security. mjr Support sending MDN via ActiveSync Request 23080. HordeCore 2.22.3 mjr Fix issue with synchronizing IMAP folder names that contain only numbers. HordePerms 2.1.6 mjr Use NULL instead...

Information disclosure

Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable."...

CVE-2013-1455: Exposure of Sensitive Information to an Unauthorized Actor

Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable."...

[20130202] - Core - Information Disclosure

Undefined variable caused information disclosure in some situations...

Fedora 9 : squirrelmail-1.4.19-1.fc9 (2009-5471)

Fri May 22 2009 Michal Hlavinka - 1.4.19-1 - updated to 1.4.19 - fixes CVE-2009-1579, CVE-2009-1580, CVE-2009-1581 - Tue May 19 2009 Michal Hlavinka - 1.4.18-2 - fix undefined variable aSpamIds 501260 - Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - update to 1.4.18 fixes CVE-2009-1581 - Thu Dec 4...

Fedora 9 : phpMyAdmin-2.11.9.1-1.fc9 (2008-8370)

This update by upstream to phpMyAdmin 2.11.9.1 solves a not yet clearly specified code execution vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Export type...

ossigeno-rfi.txt

:::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | // :::::::::::::::::::::::::::::We...

News Evolution 1.02.0 - Include Undefined Variable Command Execution

News Evolution 1.02.0 - Include Undefined Variable Command Execution source: https://www.securityfocus.com/bid/6260/info News Evolution is a freely available, open source news software package. It is written in PHP, and designed for use on Unix and Linux operating systems. The problem occurs in t...

News Evolution 1.0/2.0 - Include Undefined Variable Command Execution

source: https://www.securityfocus.com/bid/6260/info News Evolution is a freely available, open source news software package. It is written in PHP, and designed for use on Unix and Linux operating systems. The problem occurs in the affnews.php file. By loading this file, and defining the chemin...

Real Networks Real Server 7.07.0.18.0 Beta - view-source Denial of Service

Real Networks Real Server 7.07.0.18.0 Beta - view-source Denial of Service source: https://www.securityfocus.com/bid/1288/info RealServer 7.0 will crash if it receives a request for a specific file with an unspecified variable value. http://targetIP:port/viewsource/template.html?...