BIT-SYMFONY-2023-46735

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.0.0 and prior to version 6.3.8, the error message in WebhookController returns unescaped user-submitted input. As of version 6.3.8, WebhookController now doesn't return any...

HTTP Request Smuggling

Modern web applications are often deployed with a chain of HTTP servers which ensure the transmission of the HTTP traffic from users to the service. Typical deployments include the usage of a front-end server, usually a load balancer or a reverse proxy, which will then transmit the requests to on...

CVE-2024-20837

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction...

[SECURITY] Fedora 38 Update: dotnet8.0-8.0.102-1.fc38

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Fedora: Security Advisory for dotnet8.0 (FEDORA-2024-b2db508cc2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: dotnet7.0-7.0.116-1.fc38

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 39 Update: dotnet7.0-7.0.116-1.fc39

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

CVE-2024-20907

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: File download. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-20907

Oracle E-Business Suite CVE-2024-20907 affects Oracle Web Applications Desktop Integrator (component: File download) in versions 12.2.3–12.2.13. The root cause is insufficient input validation in the file download component. The vulnerability allows an unauthenticated attacker, reachable over HTT...

The vulnerability of the Scheduler Application component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the Scheduler Application component in the XWiki platform for creating collaborative web applications exists due to the failure to address issues related to eliminating specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

facileManager 安全漏洞

facileManager is a set of modular Web applications from facileManager Inc. An elevation of privilege vulnerability exists in facileManager that stems from improper privilege management. An attacker can exploit this vulnerability to gain elevated privileges on the system...

[SECURITY] Fedora 39 Update: dotnet8.0-8.0.101-1.fc39

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

POCO Security Breach

POCO is POCO open source a cross-platform C++ library . It is used to build web and internet based applications that run on desktop, server, mobile, IoT and embedded systems. A security vulnerability exists in POCO that stems from the presence of an integer overflow issue that results in a stack...

Protobuf vs JSON

A Beginners Guide to Understanding Protobuf & JSON When you dive into the sphere of data serialization, you're likely to encounter two dominant players - Protobuf, the colloquial term for Protocol Buffers, and JSON, standing for JavaScript Object Notation. Both of these formats carry distinctive...

[SECURITY] Fedora 38 Update: dotnet8.0-8.0.101-1.fc38

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

The vulnerability of the file loading component of the Oracle Web Applications Desktop Integrator software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the file loading component of the Oracle Web Applications Desktop Integrator software relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of protected information through the use of...

The vulnerability of the App Check software for detecting vulnerabilities in web applications, related to inadequate access control, allows a hacker to execute arbitrary code.

The vulnerability of the App Check tool, which verifies the implementation of application software interfaces, is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

Number withdrawn

Monitorr is Monitorr open source a web front-end . It is used to display the status of any web application or service in real time. This CVE number has been withdrawn...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Web...

PT-2024-1205 · Oracle · Oracle Web Applications Desktop Integrator

Name of the Vulnerable Software and Affected Versions: Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the file download component of Oracle Web Applications Desktop Integrator. This easily exploitabl...