GHSA-JFHM-5GHH-2F97 vulnerabilities

Vulnerabilities for packages: mitmproxy, py3-cassandra-medusa...

GHSA-JFHM-5GHH-2F97 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, mitmproxy...

GHSA-Q3QX-C6G2-7PW2 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-Q3QX-C6G2-7PW2 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-QVRW-V9RV-5RJX vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-QVRW-V9RV-5RJX vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-PJJW-QHG8-P2P9 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-GFW2-4JVH-WGFG vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-GFW2-4JVH-WGFG vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2023-47627 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2023-47627 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

Exploit for Code Injection in Apache Cassandra

0day 由于众所周知的原因，原始仓库被删除，但保留了副本，forks和stars 清零 不过请放心，还是原来的配方，原来的味道。 为了避免再次出现这种情况找不到此项目，可以Follow 一下 本仓库所有内容仅限用于学习交流 English | 中文 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新 优秀项目列表 1. Fastjson RCE https://github.com/dbgee/fastjson-rce 2. Log4j RCE https://github.com/dbgee/log4j2rce 3. redis RCE...

Security Bulletin: IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities.

Summary IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-32007 DESCRIPTION: Apache Spark could allow a remote authenticated attacker to execute arbitrary commands on the...

CVE-2023-33972

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have permissions for that table. This issue...

CVE-2023-33972 Privilege escalation from having CREATE access on a keyspace in Scylladb

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have permissions for that table. This issue...

CVE-2023-33972 Privilege escalation from having CREATE access on a keyspace in Scylladb

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have permissions for that table. This issue...

CVE-2023-33972 Privilege escalation from having CREATE access on a keyspace in Scylladb

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have permissions for that table. This issue...

CVE-2023-33972

CVE-2023-33972 describes a privilege-escalation flaw in ScyllaDB where an authenticated user with CREATE privileges on a keyspace can access a table within the same keyspace to which they have no permissions. The underlying issue is a mismanagement of privileges at the keyspace level, enabling la...

Scylla Security Breach

Scylla is a ScyllaDB open source real-time big data database compatible with Apache Cassandra and Amazon DynamoDB APIs. Scylla has a security vulnerability that stems from allowing an attacker with CREATE access to elevate to higher privileges...

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to privilege escalation attack due to Apache Cassandra

Summary Apache Cassandra is used by IBM Global Mailbox as part of the application database. Vulnerability Details CVEID:CVE-2023-30601 DESCRIPTION: Apache Cassandra could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the FQL/Audit logs...