Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515-NSE This repository provides a tool to check f...

MAL-2024-7771 Malicious code in express-jwt-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...

Subnet Solutions PowerSYSTEM Center

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Subnet Solutions Inc. Equipment : Subnet PowerSYSTEM Center Vulnerability : Prototype Pollution 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated...

CVE-2024-20401

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...

Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...

MAL-2024-7767 Malicious code in @playsistemico/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 630104848acd582d628c24e45dc9472952d21452b641115bb0d9fd3eabb2a5dc The OpenSSF Package Analysis project identified '@playsistemico/core' @ 11.33.70 npm as malicious. It is considered malicious because: - The...

SUSE CVE-2022-48782

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...

CVE-2022-48782

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...

Malicious code in globalstyling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee2731f771d38fb75a623ac5b3107d1b89202dab21cfa974698f5382567510e6 The OpenSSF Package Analysis project identified 'globalstyling' @ 100.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7762 Malicious code in globalstyling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee2731f771d38fb75a623ac5b3107d1b89202dab21cfa974698f5382567510e6 The OpenSSF Package Analysis project identified 'globalstyling' @ 100.69.69 npm as malicious. It is considered malicious because: - The package...

CVE-2022-48782

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...

CVE-2022-48782

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...

CVE-2022-48782 mctp: fix use after free

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...

CVE-2022-48782 mctp: fix use after free

In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...

Malicious code in pleasedontcall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5d1162310e60091c8762dabc38ba9a5eee768bd35759649e12b866d40f6582d The OpenSSF Package Analysis project identified 'pleasedontcall' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7746 Malicious code in inline-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9b4dc3b900cda7b3ddba48442ae448f1af310a11854f024134f391baafb62d8 The OpenSSF Package Analysis project identified 'inline-icons' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

The vulnerability of the SAML standard implementation in the Splunk Enterprise platform for operational analysis allows a perpetrator to carry out a brute-force attack.

The vulnerability of the SAML standard implementation in the Splunk Enterprise platform for operational analysis is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...

Malicious code in jquery-ui-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac81ca06088c1af7f942bcd5c3e05a81ee19ded09f4417b8eea369da63f3c3 The OpenSSF Package Analysis project identified 'jquery-ui-dialog' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7741 Malicious code in pewspwnrepo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11001ebb95c4c041a670d6ce81a5106bc97c943d9a1b5c7f7fe68b2e963b0ee4 The OpenSSF Package Analysis project identified 'pewspwnrepo2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Citrix Gateway: Launch, Authentication, Policies and Endpoint Analysis (EPA)

Introduction This article provides a summary of some of the useful resources about how to investigate, troubleshoot, and prevent the most common issues related to launching a session on Citrix Gateway. This article includes links intended to help with topics which are related to Authentication, t...