Authentication fails through Remote Power shell SDK

Authentication fails through Remote Power shell SDK whenupper case and lower case are present in the Customer ID...

jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin

A flaw was found in the Jenkins JUnit plugin. The affected versions of the JUnit Plugin do not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability. This may allow an attacker to control test case class names in the JUnit resources...

jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin

A flaw was found in the Jenkins JUnit plugin. The affected versions of the JUnit Plugin do not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability. This may allow an attacker to control test case class names in the JUnit resources...

CVE-2023-42016

creationtimestamp| type| source ---|---|--- 2024-02-09 02:26:18+00:00| seen| https://t.me/ctinow/181763...

jgit: arbitrary file overwrite

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

jgit: arbitrary file overwrite

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

jgit: arbitrary file overwrite

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.15 Security update (Moderate) (RHSA-2024:0711)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0711 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

CVE-2023-47167

creationtimestamp| type| source ---|---|--- 2024-02-06 18:26:55+00:00| seen| https://t.me/ctinow/180204 2024-02-09 08:16:37+00:00| seen| https://t.me/ctinow/181844 2024-03-01 12:11:05+00:00| seen| https://t.me/ctinow/197541...

CVE-2023-6336

creationtimestamp| type| source ---|---|--- 2024-02-06 18:12:08+00:00| seen| https://t.me/ctinow/180184...

phpMyFAQ User Removal Page Allows Spoofing Of User Details

Summary phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. Details phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing...

CVE-2013-2258

creationtimestamp| type| source ---|---|--- 2024-02-04 07:36:59+00:00| seen| https://t.me/ctinow/178705...

CVE-2023-43183

creationtimestamp| type| source ---|---|--- 2024-02-03 10:21:48+00:00| seen| https://t.me/ctinow/178467 2024-02-13 03:16:28+00:00| seen| https://t.me/ctinow/183581 2024-02-20 02:31:43+00:00| seen| https://t.me/ctinow/188051...

CVE-2023-44313

creationtimestamp| type| source ---|---|--- 2024-01-31 10:21:40+00:00| seen| https://t.me/ctinow/176627 2024-02-04 02:49:41+00:00| seen| Telegram/5viUor3PDSvPiqgNCr88mEj2y9oAxMu41yUy-oSPp0S00Q 2024-02-10 15:53:58+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9943...

CVE-2024-1036

creationtimestamp| type| source ---|---|--- 2024-01-30 19:26:15+00:00| seen| https://t.me/ctinow/176191 2024-02-21 15:42:14+00:00| seen| https://t.me/ctinow/189684...

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

kernel: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in updateparentsubpartscpumask It was found that the check to see if a partition could use up all the cpus from the parent cpuset in updateparentsubpartscpumask was incorrect. As a result, it is...

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...