Malicious code in python-bitget-connect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1797b7fdf9859888b5495817784ead0bdc01e6acad5ae410af1e1df89acbded6 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...

SUSE CVE-2024-52801

sftpgo is a full-featured and highly configurable event-driven file transfer solution. Server protocols: SFTP, HTTP/S, FTP/S, WebDAV. The OpenID Connect implementation allows authenticated users to brute force session cookies and thereby gain access to other users' data, since the cookies are...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

Ivanti Connect Secure security vulnerabilities

Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. Ivanti Connect Secure suffers from a buffer overflow vulnerability that originates from a boundary error in IPsec when handling untrusted input. An attacker could exploit the vulnerability to cause a denial of servi...

Ivanti Connect Secure security vulnerabilities

Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. Ivanti Connect Secure suffers from an out-of-bounds read vulnerability that stems from a lack of proper authentication of user-supplied data in IPsec, which can be exploited by an attacker to cause a denial of servi...

CVE-2024-37401: Out-of-bounds Read

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377: Out-of-bounds Write

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

Adobe Connect Privilege Escalation

The vulnerability of Adobe Connect web conference software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

WordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ImmoToolBox Connect versions = 1.3.3...

CVE-2024-37401

CVE-2024-37401 affects Ivanti Connect Secure IPsec with an out-of-bounds read in versions before 22.7R2.1, enabling a remote unauthenticated attacker to cause a denial of service. Public disclosures and advisories confirm the vulnerability lies in the IPsec functionality and can be exploited remo...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37377

Ivanti Connect Secure (ICS) is affected by CVE-2024-37377 due to a heap-based buffer overflow in IPsec prior to version 22.7R2.3, allowing a remote unauthenticated attacker to cause a Denial of Service. Public sources confirm this vulnerability in ICS/IPsec and note a fixed release path: update t...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...

ceph: rhceph-container: Authentication bypass in CEPH RadosGW

A vulnerability in the Ceph Rados Gateway RadosGW OIDC provider allows attackers to bypass JWT signature verification by supplying a token with "none" as the algorithm alg. This occurs because the implementation fails to enforce strict signature validation, enabling attackers to forge valid token...

Vulnerabilities fixed in Adobe Connect

Adobe has fixed vulnerabilities in Adobe Connect Versions 12.6, 11.4.7 and earlier. The vulnerabilities include both stored and reflected Cross-Site Scripting XSS that allow attackers to insert and execute malicious scripts in users' browsers. This can lead to unauthorized actions in the context ...