prebid.org Cross Site Scripting vulnerability OBB-3869875

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Who is Alleged Medibank Hacker Aleksandr Ermakov?

Authorities in Australia, the United Kingdom and the United States this week levied financial sanctions against a Russian man accused of stealing data on nearly 10 million customers of the Australian health insurance giant Medibank. 33-year-old Aleksandr Ermakov allegedly stole and leaked the...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-48848 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-48848 Source advisory: GHSA-9VFC-QXC8-WRPQ...

Malware in eslint-plugin-blade

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

F5 Networks BIG-IP : Multi-blade VIPRION Configuration utility session cookie vulnerability (K29141800)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K29141800 advisory. - An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG- ...

Malicious code in eslint-plugin-blade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae9177af783553501be9b3995cd5eebfa3a3aaef47e65237aa9f29e4630b64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8404 Malicious code in eslint-plugin-blade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae9177af783553501be9b3995cd5eebfa3a3aaef47e65237aa9f29e4630b64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-40537 Multi-blade VIPRION Configuration utility session cookie vulnerability

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K29141800: Multi-blade VIPRION Configuration utility session cookie vulnerability CVE-2023-40537

Security Advisory Description An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform. CVE-2023-40537 Impact A remote unauthenticated attacker may be able to reuse, for a limited time, an...

SQL Injection

blade-core-tool is vulnerable to SQL Injection. The vulnerability exists because the parameters submitted by the user are not properly escaped, which allows an attacker to inject and execute malicious SQL queries...

org.springblade:blade-core-boot (3.6.0), org.springblade:blade-core-cloud (3.6.0) +10 more potentially affected by CVE-2023-40787 via org.springblade:blade-core-tool (3.6.0)

org.springblade:blade-core-tool MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springblade:blade-core-tool and may be impacted: - org.springblade:blade-core-boot 3.6.0 - org.springblade:blade-core-cloud 3.6.0 -...

org.springblade:blade-core-boot (3.6.0), org.springblade:blade-core-cloud (3.6.0) +10 more potentially affected by CVE-2023-40787 via org.springblade:blade-core-tool (3.6.0)

org.springblade:blade-core-tool MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springblade:blade-core-tool and may be impacted: - org.springblade:blade-core-boot 3.6.0 - org.springblade:blade-core-cloud 3.6.0 -...

ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2023-40028 via ghost (>=0.5.10, <=1.26.2)

ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2023-40028 Source advisory: MEND:CVE-2023-40028...

K000135795: Downfall Attacks CVE-2022-40982

Security Advisory Description Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2022-40982 Impact Successfu...

HPESBHF04523 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - Prior to 2.0807-24-2023 HPE ProLiant e910t Server Blade - Prior to 2.0807-24-2023 HPE ProLia...

HPESBHF04521 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920 Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920d Server Blade - Prior to 1.7407-24-2023 CV...

Malicious code in @okcoin-dev/blade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71645eda002c3a56f041a1c91f7072a640455be1d5bed1cc7cf67fd4c1cff44b The OpenSSF Package Analysis project identified '@okcoin-dev/blade' @ 1.11.33 npm as malicious. It is considered malicious because: - The packag...

HPESBHF04464 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - prior to v2.0604-20-2023 HPE ProLiant m750 Server Blade - prior to v1.5804-20-2023 HPE ProLiant e910t Server Blade ...

HPESBHF04455 rev.1 - HPE Cray EX235a Accelerator Blade Using AMD Processors, Multiple Vulnerabilities

Potential Security Impact: Local: Code Execution, Compromise of System Integrity, Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade - Prior to 1.6.2 CVSS Scores: | CVE | CVSS...

ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2023-31133 via ghost (>=0.5.10, <=1.26.2)

ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2023-31133 Source advisory: MEND:CVE-2023-31133...