64 matches found
CVE-2025-53640
CVE-2025-53640 – Authenticated User Enumeration in CERN's Indico BOLA Vulnerability PoC and technical analysis of CVE-2025-53640: a Broken Object Level Authorization BOLA vulnerability in Indico enables authenticated user enumeration via endpoint, exposing names, emails, and affiliations. Include...
EUVD-2002-1428
Malware in sbrugna...
EUVD-2021-0101
Malware in sbrugna...
EUVD-2000-0078
Malware in sbrugna...
This Week in Spring - March 12th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it's going to be! Do this first: we need your help! Please answer some questions in our State of Spring survey! Join me for a look at the latest-and-greatest, chronicling how I got started with Spring Boot in...
A Bootiful Podcast: Cristian Schuszter on CERN
Hi, Spring fans! In this installment I talk to Cristian Schuszter, a software engineer at CERN. This episode was recorded live at VOXXED DAYS CERN!. Don't forget to help us out with the State of Spring Survey...
This Week in Spring - February 27th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring wherein we explore the latest-and-greatest in the wonderful world of Springdom. This week's going to be a very good one, so let's dive right into it! good news everyone! Spring Boot's been updated! 3.3.0-M2, 3.2.3, and 3.1.9 a...
This Week in Spring - February 20th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you this fine 20th of February, 2024? I'm doing alright on this rainy 20th of Feburary here in San Francisco, and I hope you are too! We've got a ton of things to get into this week so let's dive right into it! Have y...
A Bootiful Podcast: Dr. Venkat Subramaniam, on the latest in Java
Hi, Spring fans! In this installment the good and the great Dr. Venkat Subramaniam rejoins the show, live from the fantastic VOXXED DAYS CERN event, to talk about some of the amazing features in Java 21...
A Bootiful Podcast: Spring trainer extraordinairre Patrick Baumgartner
Hi, Spring fans! In this installment, I talked to Spring trainer extraordinaire, long-time community contributor, and Voxxed Days co-organizer for various shows in Switzerland. This talk was recorded live at Voxxed Days CERN!...
remote code execution via git repo provider
Impact A remote code execution vulnerability has been identified in BinderHub, where providing BinderHub with maliciously crafted input could execute code in the BinderHub context, with the potential to egress credentials of the BinderHub deployment, including JupyterHub API tokens, kubernetes...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
PYSEC-2021-18
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
Default credentials
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
PYSEC-2021-18
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link...
CVE-2021-30185
CVE-2021-30185 affects CERN Indico prior to 2.3.4. The vulnerability resides in Indico’s URL generation for password resets, where an attacker-supplied Host header can steer the reset link to an attacker-controlled domain. If a user clicks such a link, the attacker could obtain the password reset...
