what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Jean-Benjamin Rousseau

Oracle Mojarra JSF / Eclipse Mojarra JSF 2.2 / 2.3 Cross Site Scripting

Posted Sep 18, 2019

Authored by Jean-Benjamin Rousseau, Guillaume Crouquet | Site sec-consult.com

Oracle Mojarra JSF included in Java EE 7 and Eclipse Mojarra JSF versions 2.2 and 2.3 suffer from a cross site scripting vulnerability.

tags | exploit, java, xss

SHA-256 | de2a3bd7c514f5251cb9fc4e98c11b318256b46a4c1f1f69e58c04fedcc614ca

Download | Favorite | View

DokuWiki 2018-04-22a Greebo Arbitrary Code Execution

Posted Sep 6, 2018

Authored by Jean-Benjamin Rousseau | Site sec-consult.com

DokuWiki version 2018-04-22a Greebo suffers from a CSV formula injection vulnerability that allows for arbitrary code execution.

tags | exploit, arbitrary, code execution

advisories | CVE-2018-15474

SHA-256 | 38a0d8c9e2bdcd800dc35d4dc193605ee19bb114a8e64314caf3b92b9531141a

Download | Favorite | View