CVE-2024-41122

Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets w...

CVE-2024-41122

creationtimestamp| type| source ---|---|--- 2024-07-19 22:53:53+00:00| seen| https://t.me/cvedetector/1233...

CVE-2024-41122 Custom environment variables allow to alter execution flow of plugins in Woodpecker

Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets w...

CVE-2024-41122 Custom environment variables allow to alter execution flow of plugins in Woodpecker

Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets w...

CVE-2022-41122 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2022-41122

CVE-2022-41122 is described in connected CNVD/NVD sources as a Microsoft SharePoint Server spoofing vulnerability. The CNVD entry notes that an attacker could exploit a specially crafted website to spoof content, tricking users into believing the site is legitimate. The available documents do not...

CVE-2022-41122 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-41122

creationtimestamp| type| source ---|---|--- 2021-10-06 02:30:56+00:00| seen| https://t.me/cibsecurity/30019...

2vyper (=0.3.0), async-web3 (>=0.1.0 <=0.3.1) +11 more potentially affected by CVE-2021-41122 via vyper (>=0.1.0b12 <=0.2.8)

vyper PYPI version =0.1.0b12, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =1.4.0, =0.2.1, =0.1.3, =2.0.24, =0.1.2b2, =0.1.0, =0.2.4 Source cves: CVE-2021-41122 Source advisory: OSV:PYSEC-2021-366...

CVE-2021-41122

CVE-2021-41122 affects the Vyper smart contract language. The issue is that in affected versions, external functions did not properly validate the bounds of decimal arguments, enabling logic errors. The root cause is insufficient bounds checking for decimal inputs in external function definitions...

CVE-2023-41122

CVE-2023-41122 entry is rejected and not used; it does not represent an active vulnerability.