-
### Environment
* **Version**: Version: 2.5.4
* **Installation**: git clone
* **PHP version**:
* **OS**: Debian stable
* **Database**: MariaDB
* **Parameters**: unavailable (hosted by a frie…
-
Support the name and version identification of the third-party jar package of Java programs, such as fastjson.jar
Fastjson < 1.2.67 deserialization Remote Code Execution Vulnerability
Traverse t…
-
So I think a security vulnerability would be if a malicious website sent a request to localhost:port, as flask-desktop is connected to python that has a higher amount of user access(such as modifying …
-
### Finding Description
Your application is using `addJavascriptInterface()`. This may allow an attacker to execute arbitrary code on Android devices. The vulnerability is exploited by injecting Java…
-
```
We're running on 64-bit Ubuntu with the following versions installed (as part
of the script):
eventlog_0.2.12.tar.gz
syslog-ng_3.2.2.tar.gz
elsa-0.1.1.tar.gz
We're trying to write a new parser…
-
### Pitch
Version number information from lib/mastodon/version.rb is currently displayed to web site visitors, and via the API. I'd rather not advertise the version number of Mastodon that I'm runn…
-
I'm using ubutu 20, nodejs 8.17. After installing the dependencies I install the stf globally by 'npm install -g @devicefarmer/stf', then I can run stf successfully and connect one device.
Here is …
-
Hello,
I'm trying to use OOD to connect to a custom HTTPS server using the reverse proxy feature.
While it works very well for unsecure web servers (HTTP), with the SSL layer I'm getting the follo…
-
https://github.com/mozilla/positron/blob/master/positron/electron/lib/browser/rpc-server.js#L46 checks if a prototype object is strictly equal to _Object.prototype_, i.e. `proto === Object.prototype`.…
-
- Site: [http://testphp.vulnweb.com](http://testphp.vulnweb.com)
**New Alerts**
- **Absence of Anti-CSRF Tokens** [10202] total: 11:
- [http://testphp.vulnweb.com/](http://testphp.vulnweb.co…