PT-2024-8869 · Brocade · Brocade X7 +6

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.2.0c Brocade Fabric OS versions 9.2.1 through 9.2.1a Description: The issue is related to a command injection vulnerability in the IPSEC component of Brocade Fabric OS, which could allow a local...

K000141505: Intel UEFI vulnerability CVE-2024-21829

Security Advisory Description Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-21829 Impact Attackers may exploit this vulnerability to enable privilege escalati...

PT-2024-32467

Name of the Vulnerable Software and Affected Versions Filament versions 3.0.0 through 3.2.114 Description The issue is a cross-site scripting XSS vulnerability. If values passed to a ColorColumn or ColumnEntry are not valid and contain a specific set of characters, applications are vulnerable to...

FlashArray and FlashBlade security vulnerabilities

Pure Storage FlashArray and Pure Storage FlashBlade are both products of Pure Storage, U.S.A. Pure Storage FlashArray is an all QLC flash storage array.Pure Storage FlashBlade is a consolidated storage platform for file and object Pure Storage FlashBlade is a consolidated storage platform for fil...

CVE-2024-8023: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/blade-system/menu/list?updatexml. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

MAL-2024-6784 Malicious code in blade-sauce-labs_plugin (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in blade-sauce-labs_plugin (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37621

StrongShop v1.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the component /shippingOptionConfig/index.blade.php...

StrongShop Cross-Site Scripting Vulnerability

StrongShop is a free and open source cross-border e-commerce mall website by StrongShop Open Source. A cross-site scripting vulnerability exists in StrongShop v1.0, which originates from a cross-site scripting vulnerability in the specgroupid parameter on /spec/index.blade.php...

CVE-2024-24919: Exposure of Sensitive Information to an Unauthorized Actor

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available...

Cross-Site Scripting (XSS)

illuminate/view is vulnerable to a Cross-site Scripting XSS. The vulnerability is due to inadequate input sanitization within blade templating, allowing attackers to inject malicious scripts into rendered views...

GHSA-VR95-P7Q6-8M9Q Laravel Cross-site Scripting (XSS) vulnerability in blade templating

Laravel 7.1.2 addresses a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dictate the value of attributes. All Laravel 7.x users are encouraged to upgrade as soon as possible...

Laravel Cross-site Scripting (XSS) vulnerability in blade templating

Laravel 7.1.2 addresses a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dictate the value of attributes. All Laravel 7.x users are encouraged to upgrade as soon as possible...

GHSA-297G-XG4H-7W4C Laravel Cross-site Scripting vulnerability in blade templating

Laravel is prone to a Cross-site Scripting vulnerability in blade templating...

Laravel Cross-site Scripting vulnerability in blade templating

Laravel is prone to a Cross-site Scripting vulnerability in blade templating...

PT-2024-40017 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel affected versions not specified Description: The issue is related to a Cross-site Scripting vulnerability in the blade templating of Laravel. Recommendations: At the moment, there is no information about a newer version that contains ...

PT-2024-40487

Name of the Vulnerable Software and Affected Versions Laravel versions prior to 7.1.2 Description The issue is related to a possible XSS attack vector in the Blade Component tag attributes. This occurs when users are allowed to dictate the value of attributes. Recommendations For versions prior t...

CVE-2024-26941 drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau

In the Linux kernel, the following vulnerability has been resolved: drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau Fix a regression when using nouveau and unplugging a StarTech MSTDP122DP DisplayPort 1.2 MST hub the same regression does not appear when using a Cable Matters...

CVE-2024-33332: Improper Neutralization of Special Elements used in an SQL Command

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

CVE-2024-3039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Shanghai Brad Technology BladeX 3.4.0. Affected is an unknown function of the file /api/blade-user/export-user of the component API. The manipulation with the input updatexml1,concat0x3f,md5123456,0x3f,1=1 leads to sql injection. It is...