User Registration, Login & Landing Pages – LeadMagic Security Vulnerabilities

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: metacontroller, flux-helm-controller, opentofu, skaffold, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller, cluster-autoscaler, kpt, mc, pulumi-kubernetes-operator, buildkitd, scorecard, metrics-server, hey, pulumi-language-yaml,....

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, clusterctl, etcd, flux-helm-controller, terraform-docs, opentofu, skaffold, tekton-chains, containerd, cosign, certificate-transparency, kubevela, istio-operator, fuse-overlayfs-snapshotter, skopeo, prometheus, src, ingress-nginx-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: terraform-docs, skaffold, tekton-chains, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure, nri-memcached, metrics-server, chezmoi,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, containerd, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler, kpt, mc,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-helm-controller, terraform-docs, opentofu, tekton-chains, containerd, cosign, certificate-transparency, skopeo, istio-operator, src, prometheus, terragrunt, cluster-autoscaler, kubernetes, buildkitd, kubernetes-event-exporter, scorecard,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, clusterctl, etcd, flux-helm-controller, terraform-docs, opentofu, skaffold, tekton-chains, containerd, cosign, certificate-transparency, kubevela, istio-operator, fuse-overlayfs-snapshotter, skopeo, prometheus, src, ingress-nginx-controller,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: terraform-docs, skaffold, tekton-chains, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure, nri-memcached, metrics-server, chezmoi,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, tekton-chains, containerd, cosign, src, kubevela, istio-operator, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler,.....

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, containerd, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler, kpt, mc,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-helm-controller, terraform-docs, opentofu, tekton-chains, containerd, cosign, certificate-transparency, skopeo, istio-operator, src, prometheus, terragrunt, cluster-autoscaler, kubernetes, buildkitd, kubernetes-event-exporter, scorecard,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, tekton-chains, containerd, cosign, src, kubevela, istio-operator, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler,.....

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, conftest, spark-operator, dgraph, terraform-provider-azurerm, neuvector-agent, kubescape, coredns, flux-helm-controller, tctl, pulumi-language-java, kubernetes-csi-node-driver-registrar, nvidia-device-plugin, cosign, src, keda, kubevela,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metacontroller, flux-helm-controller, opentofu, skaffold, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller, cluster-autoscaler, kpt, mc, pulumi-kubernetes-operator, buildkitd, scorecard, metrics-server, hey, pulumi-language-yaml,....

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-6043 SourceCodester Best House Rental Management System admin_class.php login sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-38439

Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in...

CVE-2024-38439

Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in...

U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain

Law enforcement authorities have allegedly arrested a key member of the notorious cybercrime group called Scattered Spider. The individual, a 22-year-old man from the United Kingdom, was arrested this week in the Spanish city of Palma de Mallorca as he attempted to board a flight to Italy. The...

CVE-2024-38439

Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in...

Exploit for OS Command Injection in Php

CVE-2024-4577 In PHP when using Apache and PHP-CGI on...

CVE-2024-31870

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...

CVE-2024-27275

IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local user without administrator privilege can configure a physical file trigger to execute with the privileges of a user socially engineered to access the target...

CVE-2024-31870

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...

CVE-2024-27275

IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local user without administrator privilege can configure a physical file trigger to execute with the privileges of a user socially engineered to access the target...

CVE-2024-27275 IBM i privilege escalation

IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local user without administrator privilege can configure a physical file trigger to execute with the privileges of a user socially engineered to access the target...

CVE-2024-31870 IBM i information disclosure

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...

CVE-2024-31870 IBM i information disclosure

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...