net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

EUVD-2005-0802

Malware in sbrugna...

WordPress Multiple Vulnerabilities (Dec 2018) - Windows

WordPress is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2017-9634

Name of the Vulnerable Software and Affected Versions Kabona AB WebDatorCentral WDC versions prior to 3.4.0 Description An issue was discovered in the Kabona AB WebDatorCentral WDC application where the web server URL inputs are not sanitized correctly, potentially allowing cross-site scripting...