pixelpost SQL injection vulnerability (CNVD-2019-39945)

pixelpost is a set of PHP and MySQL based , scalable open source photo blog application . A SQL injection vulnerability exists in pixelpost version 1.7.1-5, which stems from a lack of validation of externally-entered SQL statements in the database-based application and can be exploited by an...

The vulnerability in the implementation of the `waitid` function in Linux kernel allows a malicious actor to exploit their privileges.

The vulnerability of the waitid function implementation in Linux operating systems is related to an unvalidated error state. Exploiting this vulnerability can allow attackers to gain increased privileges...

YouPHPTube SQL Injection Vulnerability (CNVD-2020-20385)

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in YouPHPTube version 7.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-38071)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and earlier versions, which...

rentalyard.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1001641 Security Researcher Elicx Helped patch 30 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting rentalyard.com website and its users. Following coordinate...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2019-37959)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. stb is a single file for C / C + + public domain library . A resource management error vulnerability exists in Foxit PhantomPDF, which arises from a program that does not validate the existence of an object before performing a...

FreePBX Contactmanager Cross-Site Scripting Vulnerability

FreePBX formerly known as Asterisk Management Portal is the FreePBX project's set of tools for configuring Asterisk IP telephony system through a GUI web-based graphical interface. contactmanager is one of the contact management components used in it. A cross-site scripting vulnerability exists i...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37878)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and earlier versions, which...

GHSA-MVQP-Q37C-WF9J io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')

CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' Versions of Ratpack 0.9.1 through and including 1.7.4 are vulnerable to HTTP Response Splitting, if untrusted and unsanitized data is used to populate the headers of an HTTP response. An attacker can...

YouPHPTube SQL Injection Vulnerability

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in YouPHPTube version 7.6, which stems from a lack of validation of externally entered SQL statements in database-based applications, and can be exploited by attackers to execute illegal SQL commands...

TOPMeeting SQL Injection Vulnerability

TOPMeeting is a video conferencing solution. A SQL injection vulnerability exists in versions prior to TOPMeeting 8.8 2019/08/19. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to...

YouPHPTube videoAddNew.json.php file SQL injection vulnerability

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in the /objects/videoAddNew.json.php file in YouPHPTube version 7.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit...

SonarSource SonarQube Cross-Site Scripting Vulnerability

SonarSource SonarQube is an open source code quality management system from SonarSource Switzerland. A cross-site scripting vulnerability exists in project links in SonarSource SonarQube versions prior to 7.8. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

MetInfo SQL Injection Vulnerability (CNVD-2020-14278)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo 7.0.0 beta, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an attacker...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36913)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...

phpBB cross-site request forgery vulnerability (CNVD-2019-34464)

phpBB is a set of open source and PHP-based Web forum software . The software has support for multiple languages , multiple databases and customized layout and so on. A cross-site request forgery vulnerability exists in phpBB, which arises from a WEB application that does not adequately validate...

michaelkuyperart.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-984681 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting michaelkuyperart.com...

m.johnboylawncare.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-984388 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Centreon SQL Injection Vulnerability

Centreon Merethis Centreon is an open source IT monitoring software package from Centreon France that needs to be used with Nagios. The software enables the management of Nagios via the Web, as well as the monitoring of networks, operating systems and applications via third-party components. A SQ...

CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...