13526 matches found
CVE-2019-13701
creationtimestamp| type| source ---|---|--- 2024-02-27 10:41:46+00:00| seen| https://t.me/ctinow/194210...
CVE-2023-6584
creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:07+00:00| seen| https://t.me/ctinow/194181 2024-02-27 10:26:27+00:00| seen| https://t.me/ctinow/194195...
CVE-2019-13670
creationtimestamp| type| source ---|---|--- 2024-02-27 09:16:41+00:00| seen| https://t.me/ctinow/194141...
CVE-2024-1698
creationtimestamp| type| source ---|---|--- 2024-02-27 07:26:48+00:00| seen| https://t.me/ctinow/194050 2024-02-27 07:31:53+00:00| seen| https://t.me/ctinow/194054 2024-03-14 11:21:25+00:00| seen| https://t.me/ctinow/207635 2024-03-15 16:50:07+00:00| seen| https://t.me/arpsyndicate/4228 2024-03-1...
CVE-2024-25841
In the module "So Flexibilite" soflexibilite from Common-Services for PrestaShop 4.1.26, a guest authenticated customer can perform Cross Site Scripting XSS injection...
CVE-2024-25841
CVE-2024-25841 affects PrestaShop via the So Flexibilite module from Common-Services. The vulnerability allows a guest (authenticated customer) to perform a Cross Site Scripting (XSS) injection in versions earlier than 4.1.26. Root cause details are not provided beyond the XSS in this module. The...
CVE-2019-4561
creationtimestamp| type| source ---|---|--- 2024-02-26 07:36:57+00:00| seen| https://t.me/ctinow/193133...
Malicious code in virtuoso-ui-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e312940c270bdfe72147c1582e1a07fef45096820038e878c4f91bdd444c03dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
@adamlonsdale/backstage-plugin-armorcode-backend (>=0.0.1-alpha, <=0.0.4), @austin-garrard/backstage-plugin-backend (>=0.0.1-alpha.22, <=0.0.1) +194 more potentially affected by CVE-2024-26150 via @backstage/backend-common (>=0.0.0-nightly-20220708025041, <=0.17.0)
@backstage/backend-common NPM version =0.0.0-nightly-20220708025041, =0.0.1-alpha, =0.0.1-alpha.22, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-20220709024234, =0.0.0-nightly-20220811024336, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20220709024234, =0.0.0-nightly-2021101322257,...
CVE-2024-26150 `@backstage/backend-common` vulnerable to path traversal through symlinks
@backstage/backend-common is a common functionality library for backends for Backstage, an open platform for building developer portals. In @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the resolveSafeChildPath utility were not exhaustive enough, leadi...
CVE-2024-26150
CVE-2024-26150 affects @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, where path checks in resolveSafeChildPath were not exhaustive, enabling potential path traversal if symlinks are injected. The issue is publicly documented across multiple sources (NVD, GHSA advisory, ...
CVE-2019-19074
creationtimestamp| type| source ---|---|--- 2024-02-23 12:11:20+00:00| seen| https://t.me/ctinow/191672...
OESA-2024-1198 containers-common security update
This package contains common configuration files and documentation for container tools ecosystem, such as Podman, Buildah and Skopeo. Security Fixes: Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP wi...
PT-2024-21301 · Npm · @Backstage/Backend-Common
Name of the Vulnerable Software and Affected Versions: @backstage/backend-common versions prior to 0.21.1 @backstage/backend-common versions prior to 0.20.2 @backstage/backend-common versions prior to 0.19.10 Description: The issue concerns the @backstage/backend-common library, where paths check...
CVE-2024-24817
creationtimestamp| type| source ---|---|--- 2024-02-22 19:28:14+00:00| seen| https://t.me/ctinow/191047 2024-02-22 19:28:16+00:00| seen| https://t.me/ctinow/191049 2024-03-13 14:46:39+00:00| seen| https://t.me/ctinow/206748 2025-02-06 02:44:20+00:00| seen|...
CVE-2023-51388
creationtimestamp| type| source ---|---|--- 2024-02-22 17:26:54+00:00| seen| https://t.me/ctinow/190960 2024-02-22 17:31:42+00:00| seen| https://t.me/ctinow/190964 2024-03-13 14:46:36+00:00| seen| https://t.me/ctinow/206745 2026-03-20 07:30:14+00:00| seen|...
CVE-2024-0903
creationtimestamp| type| source ---|---|--- 2024-02-22 07:23:06+00:00| seen| https://t.me/ctinow/190489 2024-02-22 07:27:26+00:00| seen| https://t.me/ctinow/190499 2024-03-13 11:11:31+00:00| seen| https://t.me/ctinow/206555...
CVE-2023-24331
Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816A2v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter...
Improper Certificate Validation
org.apache.dolphinscheduler: dolphinscheduler-common is vulnerable to Improper Certificate Validation. The vulnerability is due to a lack of certificate verification in the HttpUtils class. This allows an attacker to perform a Man-in-the-Middle MITM attack by impersonating the server...