Design/Logic Flaw

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager =1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been...

CVE-2024-28114 Remote Code Execution using Server Side Template Injection in Peering Manager

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager =1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been...

CVE-2024-28114

CVE-2024-28114 affects Peering Manager (BGP session management) with a Server‑Site Template Injection that enables Remote Code Execution in versions

CVE-2024-28114 Remote Code Execution using Server Side Template Injection in Peering Manager

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager =1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been...

CVE-2024-28114 Remote Code Execution using Server Side Template Injection in Peering Manager

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager =1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been...

BIT-GOLANG-2024-24785 Errors returned from JSON marshaling may break template escaping in html/template

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates...

CVE-2024-27900

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner...

SAP ABAP Platform 安全漏洞

SAP ABAP Platform is an ABAP-based SAP solution from SAP. SAP ABAP Platform has an authorization issue vulnerability that stems from a lack of authorization checks. An attacker with a business user account in SAP ABAP Platform could exploit the vulnerability to change the privacy settings of a jo...

EulerOS 2.0 SP10 : python-jinja2 (EulerOS-SA-2024-1324)

According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible...

Peering Manager Security Vulnerability

Peering Manager is a BGP session management tool. A security vulnerability exists in Peering Manager 1.8.2 and prior versions that stems from the presence of a server template injection vulnerability. An attacker can exploit this vulnerability to execute remote code...

PT-2024-22271 · Unknown · Peering Manager

Name of the Vulnerable Software and Affected Versions: Peering Manager versions =1.8.2 Description: Peering Manager is a BGP session management tool. There is a Server Side Template Injection issue that leads to Remote Code Execution, allowing arbitrary commands to be executed on the operating...

WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.24 is vulnerable to Cross Site Scripting (XSS)

Software Elementor – Header, Footer & Blocks Template Type Plugin Vulnerable versions = 1.6.24 Fixed in 1.6.25 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1237 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d8efb70c30ae...

Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1071 Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CMS Made Simple <= 2.2.20 Multiple Vulnerabilities

CMS Made Simple is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cmsmadesimple:cmsmadesimple...

Fedora: Security Advisory for velocity (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for string-template-maven-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: velocity-2.3-5.fc40

Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the...

[SECURITY] Fedora 40 Update: string-template-maven-plugin-1.1-13.fc40

This plugin allows you to execute StringTemplate template files during your build. The values for templates can come from static declarations or from a Java class specified to be executed...

[SECURITY] Fedora 40 Update: plexus-velocity-2.0-6.fc40

This package provides Plexus Velocity component - a wrapper for Apache Velocity template engine, which allows easy use of Velocity by applications built on top of Plexus container...