BIT-ALFRESCO-2020-8777

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document...

BIT-ALFRESCO-2020-8778

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...

BIT-AKENEO-2022-46157

Akeneo PIM is an open source Product Information Management PIM. Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the versions...

7 Rapid Questions with #77 Ray Bourque

We couldn’t pass up the opportunity to bring Boston Bruins legend Ray Bourque into the herd as we continue to expand our Bruins jersey sponsorship. Ray is an absolute hero to Bruins fans everywhere. He has cemented his status in the annals of Boston sports history through 21 seasons in the black...

PYSEC-2024-278

A vulnerability was found in LangChain langchaincommunity 0.0.26. It has been classified as critical. Affected is the function loadlocal in the library libs/community/langchaincommunity/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It ...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +133 more potentially affected by CVE-2024-2057 via langchain-community (>=0.0.1, <=0.0.25)

langchain-community PYPI version =0.0.1, =0.0.6.dev1, =0.0.1, =0.0.1, =0.2.0, =0.1.0, =0.1.5, =0.0.13, =0.0.1, =0.0.4 and more Source cves: CVE-2024-2057 Source advisory: OSV:PYSEC-2024-278...

PYSEC-2024-278

A vulnerability was found in LangChain langchaincommunity 0.0.26. It has been classified as critical. Affected is the function loadlocal in the library libs/community/langchaincommunity/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It ...

CVE-2024-2057 LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

A vulnerability was found in LangChain langchaincommunity 0.0.26. It has been classified as critical. Affected is the function loadlocal in the library libs/community/langchaincommunity/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It ...

PT-2024-18682 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: LangChain langchain community version 0.0.26 LangChain version 0.1.9 Description: A critical issue has been found, affecting the load local function in the libs/community/langchain community/retrievers/tfidf.py library of the TFIDFRetriever...

Spring into Action! Earn up to $10,000 with our Extended Bug Bounty Program Extravaganza through Memorial Day!

Spring into action and kick-start your spring cleaning with a tech twist! Were excited to announce the extension of our Bug Bounty Extravaganza through Memorial Day, May 27th, 2024. Now, you have a golden opportunity to earn up to $10,000 for reporting vulnerabilities in WordPress software over t...

com.github.hiwepy:socketio-spring-boot-starter (>=2.7.x.20240823.release, <=3.3.x.20240823.release), com.hazelcast:hazelcast-3-connector-impl (>=5.0.4, <=5.3.8) +25 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.12.13)

com.hazelcast:hazelcast MAVEN version 3.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.github.hiwepy:socketio-spring-boot-starter =2.7.x.20240823.release, =5.0.4, =3.1.18, =3.2.11, =3.2.11,...

com.orientechnologies:orientdb-community (>=2.1-rc1, <=2.1.5), com.orientechnologies:orientdb-distributed (>=2.1-rc1, <=2.1.5) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.3.5)

com.hazelcast:hazelcast-all MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.orientechnologies:orientdb-community =2.1-rc1, =2.1-rc1, =2.1.5 Source cves: CVE-2023-45859 Source...

com.orientechnologies:orientdb-community (>=2.1.6, <=2.1.25), com.orientechnologies:orientdb-distributed (>=2.1.6, <=2.1.25) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.5.3)

com.hazelcast:hazelcast-all MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.orientechnologies:orientdb-community =2.1.6, =2.1.6, =2.1.25 Source cves: CVE-2023-45859 Source...

Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.94 for Mac,Linux and 122.0.6261.94/.95 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 122.0.6261.94 for Mac and 122.0.6261.95...

idahocf.org Cross Site Scripting vulnerability OBB-3859591

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Tainacan Plugin <= 0.20.6 is vulnerable to Sensitive Data Exposure

Software Tainacan Type Plugin Vulnerable versions = 0.20.6 Fixed in 0.20.7 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-1435 Patch priority Low CVSS severity Low 5.3 Developer Tainacan Community PSID a8fb861193db Credits Peng Zhou Required privilege...

CVE-2024-0243 Server-side Request Forgery In Recursive URL Loader

With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...

CVE-2024-25130

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.99.76 of Tuleap Community Edition and prior to versions 15.5-4 and 15.4-7 of Tuleap Enterprise Edition, users with a read access to a tracker where the mass update feature is use...

PT-2024-20770 · Unknown · Tuleap Community Edition +1

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 15.5.99.76 Tuleap Enterprise Edition versions prior to 15.5-4 Tuleap Enterprise Edition versions prior to 15.4-7 Description: Tuleap is an open source suite to improve management of software...

Tuleap Security Vulnerabilities

Tuleap is an open source application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability exists in Tuleap that originates from a user with read access to a tracker that us...