MAL-2025-36265 Malicious code in test-mlw2-snags-fomes-brief-polks (npm)

The package test-mlw2-snags-fomes-brief-polks was found to contain malicious code...

org.apache.submarine:submarine-submitter-k8s (=0.8.0), org.apache.submarine:submarine-test-k8s (=0.8.0) potentially affected by CVE-2024-36265 via org.apache.submarine:submarine-server-core (=0.8.0)

org.apache.submarine:submarine-server-core MAVEN version =0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.submarine:submarine-server-core and may be impacted: - org.apache.submarine:submarine-submitter-k8s =0.8.0 -...

CVE-2024-36265

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...

CVE-2024-36265 Apache Submarine Server Core: authorization bypass

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...

CVE-2024-36265 Apache Submarine Server Core: authorization bypass

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...

CVE-2022-36265

creationtimestamp| type| source ---|---|--- 2024-03-11 07:14:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10122...

CVE-2020-36265

CVE-2020-36265 is rejected and not used; this entry does not represent an active vulnerability.

CVE-2020-36265

...

CVE-2022-36265

CVE-2022-36265 affects Airspan AirSpot 5410 (versions 0.3.4.1-4 and earlier). A hidden, undocumented system command web page in firmware lets an authenticated user execute Linux commands with root privileges, enabling full device compromise. Exploitation details are described across multiple sour...