12997 matches found
NetBox 安全漏洞
NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...
PT-2024-29015 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: netbox version 4.0.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at the "/dcim/console-ports/add" API endpoint. Recommendations...
PT-2024-29016 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: netbox version 4.0.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at "/dcim/console-ports/id/edit/". Recommendations: For netbox...
PT-2024-26341 · Ibm · Ibm Websphere Application Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue allows a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code on the system using specially crafted...
ZITADEL Vulnerable to Session Information Leakage
Impact ZITADEL provides users the ability to list all user sessions of the current user agent browser by API and in the Console UI. Due to a missing check, user sessions without that information e.g. when created though the session service were incorrectly listed exposing potentially other user's...
GHSA-CVW9-C57H-3397 ZITADEL Vulnerable to Session Information Leakage
Impact ZITADEL provides users the ability to list all user sessions of the current user agent browser by API and in the Console UI. Due to a missing check, user sessions without that information e.g. when created though the session service were incorrectly listed exposing potentially other user's...
[SECURITY] Fedora 39 Update: cockpit-320-1.fc39
The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...
PT-2024-37698 · Red Hat · Openshift Console
Name of the Vulnerable Software and Affected Versions: OpenShift Console affected versions not specified Description: A flaw was found in OpenShift Console, allowing a Server Side Request Forgery SSRF attack to occur if an attacker supplies all or part of a URL to the server to query. The server,...
Turning Jenkins Into a Cryptomining Machine From an Attacker's Perspective
In this blog entry, we will discuss how the Jenkins Script Console can be weaponized by attackers for cryptomining activity if not configured properly...
PT-2024-5369 · Skupper · Skupper
Name of the Vulnerable Software and Affected Versions: Skupper affected versions not specified Description: A flaw was found in Skupper that may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie. This issue arises when Skupper is initialized with the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.1 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
PT-2024-28623 · Zitadel · Zitadel
Name of the Vulnerable Software and Affected Versions: ZITADEL versions 2.0.0 through 2.53.7 ZITADEL versions 2.54.0 through 2.54.4 ZITADEL versions 2.55.0 through 2.55.0 Description: ZITADEL is an open-source identity infrastructure tool that provides users the ability to list all user sessions ...
The vulnerability of the SEOPress plugin of the WordPress content management system, related to deserialization mechanism flaws, allows attackers to execute arbitrary commands in the web console.
The vulnerability of the SEOPress plugin of the WordPress content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands from the web console...
CVE-2024-35155
IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765...
CVE-2024-35155
IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765...
CVE-2024-35155
The CVE-2024-35155 entry affects IBM MQ Console versions 9.3 LTS and 9.3 CD. The issue is an information disclosure vulnerability where a detailed technical error message returned in the browser could reveal sensitive information, which an attacker could use to inform further attacks. The vulnera...
The vulnerability of the ioctl component of the application management tools and Flatpak environments, which allows a hacker to trigger a service failure
The vulnerability of the ioctl device for application and Flatpak environments relates to the copying of text from the virtual console and its insertion into the command buffer, from which commands can be executed after the Flatpak application is closed. Exploiting this vulnerability could allow ...
The vulnerability of the tiff.c file in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure
The vulnerability of the tiff.c file in the console-based graphic editor ImageMagick is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2024-26342 · Ibm · Ibm Mq Console
Name of the Vulnerable Software and Affected Versions: IBM MQ Console versions 9.3 LTS and 9.3 CD Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...