io.quarkus:quarkus-jaxrs-client-reactive-deployment (1.13.5.final), io.quarkus:quarkus-rest-client-reactive-deployment (1.13.5.final) +7 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.13.5.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-csrf-reactive-deployment (2.16.5.final), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.16.5.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.16.5.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.16.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.automatiko.quarkus:automatiko-operator-deployment (0.15.0), io.automatiko.quarkus:automatiko-service-deployment (0.15.0) +24 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.8.1.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.1.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.0.1.final) +9 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.0.1.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-deployment (1.11.0.beta2), io.quarkus:quarkus-resteasy-reactive-deployment (1.11.0.beta2) +4 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.11.0.beta2)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.11.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...

io.automatiko.quarkus:automatiko-operator-deployment (0.21.0), io.automatiko.quarkus:automatiko-service-deployment (0.21.0) +25 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.15.1.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.15.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-deployment (1.11.0.final), io.quarkus:quarkus-resteasy-reactive-deployment (1.11.0.final) +4 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.11.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...

io.quarkus:quarkus-csrf-reactive-deployment (2.15.2.final), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.15.2.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.15.2.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.15.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.1.2.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.1.2.final) +10 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.1.2.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-csrf-reactive-deployment (2.14.0.cr1), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.14.0.cr1) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.14.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.14.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.12.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.12.0.cr1) +51 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.12.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.10.3.final), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.10.3.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.10.3.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.10.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-csrf-reactive-deployment (2.13.8.final), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.13.8.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.13.8.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.4.0.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.4.0.final) +10 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.4.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

CVE-2024-3622 Mirror-registry: plain-text default csrf secret key

A flaw was found when using mirror-registry to install Quay. It uses a default secret, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same secret key. This flaw allows a...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024)

Did you know were running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure! Last week, there were 209 vulnerabilities disclosed in 169 WordPres...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=2.4.1, <=2.5.0), com.github.mcollovati:quarkus-hilla-deployment (>=2.0.0-beta1, <=2.5.0) +51 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (>=3.3.0, <=3.6.8)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version =3.3.0, =2.4.1, =2.0.0-beta1, =2.4.1, =0.32.0, =0.32.0, =preview, =0.0.0, =0.5.0, =0.2.0, =0.6.3, =0.1.0, =0.1.0, =0.1.0, =0.7.1 and more Source cves: CVE-2023-5675 Sou...

br.com.labbs:quarkus-monitor-reactive-deployment (>=1.0.4, <=2.0.0), com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0-alpha1, <=2.0.0-alpha1) +47 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (>=1.11.0.beta1, <=3.2.9.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version =1.11.0.beta1, =1.0.4, =1.0.0-alpha1, =0.8.0, =0.8.0, =1.0.0, =1.0.3, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.30.0, =1.1.final, =2.13.0.cr1, =3.2.9.final and more Source cves: CVE-2023-5675 Source advisor...

io.quarkiverse.renarde:quarkus-renarde-backoffice-deployment (>=3.0.8, <=3.0.9), io.quarkiverse.renarde:quarkus-renarde-deployment (>=3.0.8, <=3.0.9) +15 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (3.7.0)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

Cybersecurity researchers have discovered an ongoing attack campaign that's leveraging phishing emails to deliver a malware called SSLoad. The campaign, codenamed FROZENSHADOW by Securonix, also involves the deployment of Cobalt Strike and the ConnectWise ScreenConnect remote desktop software...