SUSE CVE-2013-4559

lighttpd before 1.4.33 does not check the return value of the 1 setuid, 2 setgid, or 3 setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function that cause setuid to fai...

Trellix Advanced Research Center patches 61,000 vulnerable open-source projects

Trellix Advanced Research Center Patches 61,000 Vulnerable Open-Source Projects By Trellix · January 23, 2023 This blog was written by Douglas McKee Late last year, the Trellix Advanced Research Center team uncovered a vulnerability in Python’s tarfile module. As we dug in, we realized this was...

CVE-2022-4559

creationtimestamp| type| source ---|---|--- 2022-12-16 20:24:34+00:00| seen| https://t.me/cibsecurity/54765...

CVE-2022-4559 INEX IPX-Manager list.foil.php cross site scripting

A vulnerability was found in INEX IPX-Manager up to 6.2.0. It has been declared as problematic. This vulnerability affects unknown code of the file resources/views/customer/list.foil.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version...

CVE-2022-4559

INEX IPX-Manager (versions up to 6.2.0) contains a cross-site scripting vulnerability in the file resources/views/customer/list.foil.php. Exploitation is possible remotely and could impact users who visit affected pages. The issue is mitigated by upgrading to version 6.3.0, with the patch hash bc...

CVE-2007-4559

creationtimestamp| type| source ---|---|--- 2022-09-22 11:21:31+00:00| published-proof-of-concept| https://t.me/truesecator/3454 2022-09-22 12:22:01+00:00| seen| https://t.me/ctinow/65010 2022-09-22 13:38:11+00:00| exploited| https://t.me/SEReborn/2797 2022-09-22 18:14:34+00:00| exploited|...

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

As many as 350,000 open source projects are believed to be potentially vulnerable to exploitation as a result of a security flaw in a Python module that has remained unpatched for 15 years. The open source repositories span a number of industry verticals, such as software development, artificial...

Limiting the Software Supply Chain Attack Surface

Limiting the Software Supply Chain Attack Surface By Trellix · September 21, 2022 This blog was written by Douglas McKee We often discuss how the intentions of an action matter, and it's clear to see why they do. If I am walking down the sidewalk, distracted by my phone of course and run into a...

Slackware: Security Advisory (SSA:2012-341-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4559 affecting package python2 for versions less than 2.7.18-8

CVE-2007-4559 affecting package python2 for versions less than 2.7.18-8. A patched version of the package is available...

CVE-2007-4559 affecting package python2 2.7.18-14

CVE-2007-4559 affecting package python2 2.7.18-14. A patched version of the package is available...

Ubuntu: Security Advisory (USN-4559-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Denial of Service vulnerability in IBM Spectrum Protect Server (CVE-2020-4559)

Summary The IBM Spectrum Protect Server is vulnerable to a denial of service due to improper validation of user-supplied input. Vulnerability Details CVEID: CVE-2020-4559 DESCRIPTION: IBM Spectrum Protect Server could allow an attacker to cause a denial of service due to improper validation of...

CVE-2020-4559

IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613...

CVE-2020-4559

CVE-2020-4559 affects IBM Spectrum Protect Server (7.1.x and 8.1.x). Root cause: improper validation of user-supplied input leading to denial of service. Exploitation vector: unauthenticated, remote over the network. Affected versions include 8.1.0.000–8.1.10.000 and 7.1.0.000–7.1.10.x. Remediati...

CVE-2019-4559

IBM QRadar SIEM isAffected: vulnerable versions 7.3.0–7.3.3 disclose sensitive information to unauthorized users (CVE-2019-4559). Root cause: information disclosure in QRadar SIEM potentially enabling attackers to obtain sensitive data, enabling further attacks. Public CVSS: base score 5.3 (3.0/A...

CVE-2014-4559

creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:12+00:00| seen| https://t.me/cibsecurity/8876 2024-03-17 14:51:46+00:00| seen| https://t.me/ctinow/209941...

CVE-2014-4559

CVE-2014-4559 is an XSS vulnerability in the Swipe Checkout for WP e-Commerce plugin (WordPress) affecting test-plugin.php, version 3.1.0 and earlier. The issue allows remote injection of arbitrary script/HTML via the parameters api_key, payment_page_url, merchant_id, api_url, or currency. Connec...

Debian DSA-4559-1 : proftpd-dfsg - security update

Stephan Zeisberg discovered that missing input validation in ProFTPD, a FTP/SFTP/FTPS server, could result in denial of service via an infinite loop. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4559. The...

asweb-4559-006.dvs.demon.net XSS vulnerability

Open Bug Bounty ID: OBB-648799 Description| Value ---|--- Affected Website:| asweb-4559-006.dvs.demon.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...