Traefik: TCP readTimeout bypass via STARTTLS on Postgres

Impact There is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest STARTTLS prelude and then stalling, causing connections to remain open indefinitely,...

WordPress plugin JetSmartFilters 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-27628

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component...

Fedora 17 : kernel-3.6.8-2.fc17 (2012-19337)

Update to Linux v3.6.8 with various fixes across the tree. The linux 3.6.7 stable update contains a number of important bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

vbul368-xss.txt

Discovred By : Hasadya Raed ---------------- Contact : [email protected] ---------------- Script: vBulletin V3.6.8ulletin V3.6.8 ---------------- Dork: vBulletin V3.6.8ulletin V3.6.8 ---------------- Exploit : http://www.Victim.com/vBulletin V3.6.8ulletin...