GHSL-2020-055: Server-Side Template Injection in Apache Syncope (RCE) - CVE-2019-17557

The GitHub Security Lab team has identified several potential security vulnerabilities in Apache Syncope, including RCE and XSS.

Alvaro Muñoz

GHSL-2020-054: XSS in Apache Syncope - CVE-2020-1961

The GitHub Security Lab team has identified a XSS vulnerability in Apache Syncope.

Alvaro Muñoz

GHSL-2020-029: Server-Side template injection in Apache Syncope (RCE) - CVE-2020-1959

The GitHub Security Labs team has identified a Server-Side template injection vulnerability in Apache Syncope, which leads to RCE.

Alvaro Muñoz

GHSL-2020-020: EL expression input sanitation bypass in Hibernate Validator - CVE-2020-10693

The GitHub Security Labs team has identified an EL expression input sanitation bypass vulnerability in Hibernate Validator.

Alvaro Muñoz

GHSL-2020-085: Open redirect vulnerability in Sourcegraph - CVE-2020-12283

By exploiting an open redirect vulnerability, an attacker could potentially redirect a victim to any arbitrary URL and access their OAUTH token.

Alvaro Muñoz

GHSL-2020-051, GHSL-2020-052: Multiple vulnerabilities in NTOP nDPI

The GitHub Security Lab team has identified several potential security vulnerabilities in NTOP nDPI, including RCE and DoS.

Bas Alberts

GHSL-2020-010: Out-Of-Bounds write in Android Open Source Project - CVE-2020-0070

An OOB write in AOSP allows an attacker within NFC range to obtain remote code execution on android device's NFC daemon.

Man Yue Mo

GHSL-2020-008: Out-Of-Bounds write in Android Open Source Project - CVE-2020-0071

An OOB write in AOSP allows an attacker within NFC range to obtain remote code execution on android device's NFC daemon.

Man Yue Mo

GHSL-2020-007: Out-of-bounds write in Android Open Source Project - CVE-2020-0072

An OOB write in AOSP allows an attacker within NFC range to obtain remote code execution on android device's NFC daemon.

Man Yue Mo

GHSL-2020-006: Out-Of-Bounds write in Android Open Source Project - CVE-2020-0073

An OOB write in AOSP allows an attacker within NFC range to obtain remote code execution on android device's NFC daemon.

Man Yue Mo

GHSL-2020-031: SQL injection in PureFTPd

Improper sanitization of SQL queries lead to SQL injection via a configuration file.

Antonio Morales

GHSL-2020-053: Use After Free in Chrome WebAudio

The GitHub Security Labs team has identified a Use after free in Chrome WebAudio.

Man Yue Mo

GHSL-2020-041: Use After Free in Chrome WebAudio

The GitHub Security Labs team has identified a Use after free in Chrome WebAudio.

Man Yue Mo

GHSL-2020-040: Use After Free in Chrome WebAudio

The GitHub Security Labs team has identified a Use after free in Chrome WebAudio.

Man Yue Mo

GHSL-2020-038: Use after free in Chrome WebAudio

The GitHub Security Labs team has identified a Use after free in Chrome WebAudio.

Man Yue Mo

GHSL-2020-037: Use after free in Chrome WebAudio

The GitHub Security Labs team has identified a Use after free in Chrome WebAudio.

Man Yue Mo

GHSL-2020-035: Use after free in Chrome WebAudio

The GitHub Security Labs team has identified a Use after free in Chrome WebAudio.

Man Yue Mo

GHSL-2020-030: Server-Side Template Injection in Dropwizard

Server-Side Template Injection in Dropwizard leading to Remote Code Execution (RCE).

Alvaro Muñoz

GHSL-2020-015: Remote Code Execution - Bypass of CVE-2018-16621 mitigations in Nexus Repository Manager

High privileged users can bypass the existing mitigations and inject arbitrary Java EL expressions in Nexus Repository Manager, leading to a Remote Code Execution (RCE) vulnerability.

Alvaro Muñoz

GHSL-2020-014: Remote Code execution - Dynamic Code Evaluation via Scheduled Tasks in Nexus Repository Manager

It is possible for a user with the right permissions to execute arbitrary groovy or javascript scripts resulting in remote code execution.

Alvaro Muñoz

GHSL-2020-013: Remote Code Execution - Dynamic Code Evaluation via Scripts in Nexus Repository Manager

It is possible for a user with the right permissions to execute arbitrary groovy or javascript scripts resulting in remote code execution.

Alvaro Muñoz

GHSL-2020-012: Remote Code Execution - JavaEL Injection (high privileged accounts) in Nexus Repository Manager

High privileged users can inject arbitrary Java EL expressions in Nexus Repository Manager, leading to a Remote Code Execution (RCE) vulnerability.

Alvaro Muñoz

GHSL-2020-009: UAF leads to RCE in ProFTPD

A use-after-free vulnerability in ProFTPD could allow a remote attacker to execute arbitrary code on the affected system.

Antonio Morales

GHSL-2020-016: Persistent Cross-Site scripting in Nexus Repository Manager

An attacker with elevated privileges can create content selectors with a specially crafted name using the REST API, which when viewed by another user can execute arbitrary JavaScript in the context of the NXRM application.

Alvaro Muñoz

GHSL-2020-011: Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

Attackers can inject arbitrary Java EL expressions in Nexus Repository Manager, leading to a Remote Code Execution (RCE) vulnerability.

Alvaro Muñoz

GHSL-2020-056: Double free in OpenSSL client

The GitHub Security Labs team has identified a security issue in OpenSSL in which an attacker can force a client into freeing the same memory twice.

Agustin Gianni

GHSL-2020-028: Server-Side Template Injection in Netflix Titus

A Server-Side Template Injection was identified in Netflix Titus enabling attackers to inject arbitrary Java EL expressions, leading to a pre-auth Remote Code Execution (RCE) vulnerability.

Alvaro Muñoz

GHSL-2020-027: Server-Side Template Injection in Netflix Conductor

A Server-Side Template Injection was identified in Netflix Conductor enabling attackers to inject arbitrary Java EL expressions, leading to a pre-auth Remote Code Execution (RCE) vulnerability.

Alvaro Muñoz

GHSL-2020-032: out-of-bounds (OOB) read vulnerability in PureFTPd

An out-of-bounds (OOB) read vulnerability has been detected in PureFTPd's pure_strcmp function.

Antonio Morales

GHSL-2020-026: Person in the middle attacks with lua-openssl

Several security issues have been found in the way X509 certificate validation functions are exposed to LUA. Clients using certain functions in lua-openssl are exposed to person-in-the-middle attacks.

Agustin Gianni

GHSL-2020-025: OOB read and DoS in PureFTPd

An uninitialized pointer vulnerability in PureFTPd results in Out-of-Bounds reads and Denial of Service.

Antonio Morales

GHSL-2020-003, GHSL-2020-004, GHSL-2020-005: Person in the middle attack on openfortivpn clients

Several security issues have been found in the way openfortivpn deals with TLS. These issues can lead to situations in which an attacker can perform a person-in-the-middle attack on clients.

Agustin Gianni

GHSL-2020-002: out-of-bounds (OOB) read in ProFTPD

An out-of-bounds (OOB) read vulnerability detected in mod_cap.

Antonio Morales

GHSL-2020-001: Off-by-one heap overflow in Bftpd

Under certain circumstances, an off-by-one heap overflow can occur in the command_retr function.

Antonio Morales