CVE-2022-25900
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the –upload-pack feature of git. Zafiyet ile ilgili Genel Bilgi,…
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the –upload-pack feature of git. Zafiyet ile ilgili Genel Bilgi,…
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.…
The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read…
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed. Zafiyet ile…
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku…
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist. Zafiyet ile ilgili Genel Bilgi, Etki ve…
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku…
Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb. Zafiyet ile ilgili…
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized “path” parameter in…
An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting…