Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....
Search - Review
plg_search_jdownloads
Search - K2
Suche - Kategorien
Suche - Kontakte
Suche - Inhalt
Suche - Newsfeeds
Suche - Schlagwörter
Script Security (4)
Im Sinne der Aktualität sind diese News grösstenteils in englischer Sprache. Falls nötig, bitte die Übersetzungsfunktion verwenden.
-
Red Hat Security Advisory 2024-1576-03
Ruby Files ≈ Packet Storm Apr 1, 2024 | 14:05 pmRed Hat Security Advisory 2024-1576-03 - An update for the ruby:3.1 module is now available for Red Hat Enterprise Linux 9. Issues addressed include HTTP response splitting and denial of service vulnerabilities.
Read more... -
Red Hat Security Advisory 2024-1431-03
Ruby Files ≈ Packet Storm Mar 20, 2024 | 14:38 pmRed Hat Security Advisory 2024-1431-03 - An update for the ruby:3.1 module is now available for Red Hat Enterprise Linux 8. Issues addressed include HTTP response splitting and denial of service vulnerabilities.
Read more... -
Debian Security Advisory 5635-1
Ruby Files ≈ Packet Storm Mar 5, 2024 | 14:41 pmDebian Linux Security Advisory 5635-1 - Aviv Keller discovered that the frames.html file generated by YARD, a documentation generation tool for the Ruby programming language, was vulnerable to cross-site scripting.
Read more... -
Debian Security Advisory 5616-1
Ruby Files ≈ Packet Storm Feb 6, 2024 | 15:52 pmDebian Linux Security Advisory 5616-1 - It was discovered that ruby-sanitize, a whitelist-based HTML sanitizer, insufficiently sanitized style elements, which may result in cross-site scripting.
Read more... -
Gentoo Linux Security Advisory 202401-27
Ruby Files ≈ Packet Storm Jan 24, 2024 | 15:01 pmGentoo Linux Security Advisory 202401-27 - Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code. Multiple versions are affected.
Read more... -
Red Hat Security Advisory 2023-7025-01
Ruby Files ≈ Packet Storm Nov 15, 2023 | 14:04 pmRed Hat Security Advisory 2023-7025-01 - An update for the ruby:2.5 module is now available for Red Hat Enterprise Linux 8. Issues addressed include HTTP response splitting and denial of service vulnerabilities.
Read more... -
Debian Security Advisory 5530-1
Ruby Files ≈ Packet Storm Oct 23, 2023 | 14:32 pmDebian Linux Security Advisory 5530-1 - Several vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface, which may result in denial of service and shell escape sequence injection.
Read more... -
Ubuntu Security Notice USN-6219-1
Ruby Files ≈ Packet Storm Jul 17, 2023 | 13:58 pmUbuntu Security Notice 6219-1 - It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.10 and Ubuntu 20.04 LTS. It was[…]
Read more... -
Red Hat Security Advisory 2023-3821-01
Ruby Files ≈ Packet Storm Jun 28, 2023 | 03:08 amRed Hat Security Advisory 2023-3821-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Issues addressed include HTTP response splitting and denial of service vulnerabilities.
Read more... -
Ubuntu Security Notice USN-6181-1
Ruby Files ≈ Packet Storm Jun 21, 2023 | 15:59 pmUbuntu Security Notice 6181-1 - Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications the generate HTTP responses using cgi gem. An attacker could possibly use this issue to maliciously modify the response a user[…]
Read more...
Publiziert in: Script Security
-
LRMS PHP 1.0 SQL Injection / Shell Upload
PHP Files ≈ Packet Storm Apr 22, 2024 | 23:02 pmLRMS PHP version 1.0 suffers from remote shell upload and multiple remote SQL injection vulnerabilities.
Read more... -
Debian Security Advisory 5661-1
PHP Files ≈ Packet Storm Apr 16, 2024 | 14:12 pmDebian Linux Security Advisory 5661-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.
Read more... -
Debian Security Advisory 5660-1
PHP Files ≈ Packet Storm Apr 16, 2024 | 14:10 pmDebian Linux Security Advisory 5660-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.
Read more... -
GUnet OpenEclass E-learning 3.15 File Upload / Command Execution
PHP Files ≈ Packet Storm Apr 11, 2024 | 14:04 pmGUnet OpenEclass E-learning platform version 3.15 suffers from an unrestricted file upload vulnerability in certbadge.php that allows for remote command execution.
Read more... -
Invision Community 4.7.16 Remote Code Execution
PHP Files ≈ Packet Storm Apr 8, 2024 | 14:08 pmInvision Community versions 4.7.16 and below suffer from a remote code execution vulnerability in toolbar.php.
Read more... -
Invision Community 4.7.15 SQL Injection
PHP Files ≈ Packet Storm Apr 8, 2024 | 14:06 pmInvision Community versions 4.4.0 through 4.7.15 suffer from a remote SQL injection vulnerability in store.php.
Read more... -
DerbyNet 9.0 racer-results.php Cross Site Scripting
PHP Files ≈ Packet Storm Apr 5, 2024 | 18:14 pmDerbyNet version 9.0 suffers from a cross site scripting vulnerability in racer-results.php.
Read more... -
DerbyNet 9.0 playlist.php Cross Site Scripting
PHP Files ≈ Packet Storm Apr 5, 2024 | 18:14 pmDerbyNet version 9.0 suffers from a cross site scripting vulnerability in playlist.php.
Read more... -
DerbyNet 9.0 photo-thumbs.php Cross Site Scripting
PHP Files ≈ Packet Storm Apr 5, 2024 | 18:11 pmDerbyNet version 9.0 suffers from a cross site scripting vulnerability in photo-thumbs.php.
Read more... -
DerbyNet 9.0 checkin.php Cross Site Scripting
PHP Files ≈ Packet Storm Apr 5, 2024 | 18:10 pmDerbyNet version 9.0 suffers from a cross site scripting vulnerability in checkin.php.
Read more...
Publiziert in: Script Security
-
QNAP QTS / QuTS Hero Unauthenticated Remote Code Execution
CGI Files ≈ Packet Storm Feb 22, 2024 | 15:11 pmThere exists an unauthenticated command injection vulnerability in the QNAP operating system known as QTS and QuTS hero. QTS is a core part of the firmware for numerous QNAP entry and mid-level Network Attached Storage (NAS) devices, and QuTS hero[…]
Read more... -
Nikto Web Scanner 2.5.0
CGI Files ≈ Packet Storm Dec 4, 2023 | 15:02 pmNikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers.
Read more... -
R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure
CGI Files ≈ Packet Storm Dec 4, 2023 | 13:59 pmR Radio Network FM Transmitter version 1.07 suffers from an improper access control that allows an unauthenticated actor to directly reference the system.cgi endpoint and disclose the clear-text password of the admin user allowing authentication bypass and FM station setup[…]
Read more... -
Electrolink FM/DAB/TV Transmitter Unauthenticated Remote Denial Of Service
CGI Files ≈ Packet Storm Oct 2, 2023 | 15:35 pmElectrolink FM/DAB/TV Transmitter from a denial of service scenario. An unauthenticated attacker can reset the board as well as stop the transmitter operations by sending one GET request to the command.cgi gateway.
Read more... -
Lexmark Device Embedded Web Server Remote Code Execution
CGI Files ≈ Packet Storm Sep 19, 2023 | 15:57 pmAn unauthenticated remote code execution vulnerability exists in the embedded webserver in certain Lexmark devices through 2023-02-19. The vulnerability is only exposed if, when setting up the printer or device, the user selects "Set up Later" when asked if they[…]
Read more... -
Tinycontrol LAN Controller 3 Denial Of Service
CGI Files ≈ Packet Storm Sep 2, 2023 | 13:18 pmTinycontrol LAN Controller version 3 suffers from an unauthenticated remote denial of service vulnerability. An attacker can issue direct requests to the stm.cgi page to reboot and also reset factory settings on the device.
Read more... -
Western Digital MyCloud Unauthenticated Command Injection
CGI Files ≈ Packet Storm Jul 28, 2023 | 14:03 pmThis Metasploit module exploits authentication bypass (CVE-2018-17153) and command injection (CVE-2016-10108) vulnerabilities in Western Digital MyCloud before 2.30.196 in order to achieve unauthenticated remote code execution as the root user. The module first performs a check to see if the[…]
Read more... -
Ubuntu Security Notice USN-6181-1
CGI Files ≈ Packet Storm Jun 21, 2023 | 15:59 pmUbuntu Security Notice 6181-1 - Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications the generate HTTP responses using cgi gem. An attacker could possibly use this issue to maliciously modify the response a user[…]
Read more... -
SecurePoint UTM 12.x Memory Leak
CGI Files ≈ Packet Storm Apr 18, 2023 | 17:34 pmSecurePoint UTM versions 12.x suffers from a memory leak vulnerability via the spcgi.cgi endpoint.
Read more... -
SecurePoint UTM 12.x Session ID Leak
CGI Files ≈ Packet Storm Apr 18, 2023 | 17:31 pmSecurePoint UTM versions 12.x suffers from a session identifier leak vulnerability via the spcgi.cgi endpoint.
Read more...
snaplitics made a real revolution in the industry.
Publiziert in: Script Security
-
Red Hat Security Advisory 2024-1930-03
Python Files ≈ Packet Storm Apr 23, 2024 | 14:57 pmRed Hat Security Advisory 2024-1930-03 - An update for openstack-tripleo-heat-templates and python-yaql is now available for Red Hat OpenStack Platform 17.1. Issues addressed include an information leakage vulnerability.
Read more... -
Red Hat Security Advisory 2024-1931-03
Python Files ≈ Packet Storm Apr 23, 2024 | 14:57 pmRed Hat Security Advisory 2024-1931-03 - An update for python-yaql and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 17.1. Issues addressed include an information leakage vulnerability.
Read more... -
pgAdmin 8.3 Remote Code Execution
Python Files ≈ Packet Storm Apr 17, 2024 | 15:50 pmpgAdmin versions 8.3 and below have a path traversal vulnerability within their session management logic that can allow a pickled file to be loaded from an arbitrary location. This can be used to load a malicious, serialized Python object to[…]
Read more... -
WatchGuard XTM Firebox Unauthenticated Remote Command Execution
Python Files ≈ Packet Storm Mar 29, 2024 | 18:04 pmThis Metasploit module exploits a buffer overflow at the administration interface (8080 or 4117) of WatchGuard Firebox and XTM appliances which is built from a cherrypy python backend sending XML-RPC requests to a C binary called wgagent using pre-authentication endpoint[…]
Read more... -
Red Hat Security Advisory 2024-1518-03
Python Files ≈ Packet Storm Mar 27, 2024 | 14:37 pmRed Hat Security Advisory 2024-1518-03 - An update for python-twisted is now available for Red Hat OpenStack Platform 16.2.
Read more... -
Red Hat Security Advisory 2024-1516-03
Python Files ≈ Packet Storm Mar 27, 2024 | 14:36 pmRed Hat Security Advisory 2024-1516-03 - An update for python-twisted is now available for Red Hat OpenStack Platform 16.1.
Read more... -
Ubuntu Security Notice USN-6673-2
Python Files ≈ Packet Storm Mar 14, 2024 | 13:41 pmUbuntu Security Notice 6673-2 - USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 16.04 LTS. Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in[…]
Read more... -
Ubuntu Security Notice USN-6673-1
Python Files ≈ Packet Storm Mar 4, 2024 | 16:36 pmUbuntu Security Notice 6673-1 - Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in RSA PKCS#1 v1.5. A remote attacker could possibly use this issue to expose confidential or sensitive information.[…]
Read more... -
Red Hat Security Advisory 2024-1059-03
Python Files ≈ Packet Storm Mar 1, 2024 | 16:08 pmRed Hat Security Advisory 2024-1059-03 - An update for python-pillow is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Issues addressed include a code execution vulnerability.
Read more... -
Red Hat Security Advisory 2024-1060-03
Python Files ≈ Packet Storm Mar 1, 2024 | 16:08 pmRed Hat Security Advisory 2024-1060-03 - An update for python-pillow is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services[…]
Read more...
Publiziert in: Script Security