io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.1) +7 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (>=2.11.0, <=2.11.1)

org.apache.pulsar:pulsar-websocket MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2023-37544 Source advisory: OSV:GHSA-83Q5-WHQP-R8JR...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.streamnative.oss:pulsar-jms-filters (4.0.5) +8 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (3.0.0)

org.apache.pulsar:pulsar-websocket MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-websocket and may be impacted: - com.datastax.oss:pulsar-jms-filters =4.0.0, =4.0.1 - io.streamnative.oss:pulsar-jms-filters...

co.macrometa.c8streams.handlers:kop (>=2.7.1.5, <=2.7.1.6), com.clever-cloud:biscuit-pulsar (>=2.2.2, <=3.2.1) +14 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (>=2.0.0-rc1-incubating, <=2.10.4)

org.apache.pulsar:pulsar-websocket MAVEN version =2.0.0-rc1-incubating, =2.7.1.5, =2.2.2, =3.1.7, =3.6, =3.6, =0.0.1, =2.0.0-rc1-incubating, =2.0.0-rc1-incubating, =2.0.0-rc1-incubating, =2.4.0, =2.4.0, =2.0.0-rc1-incubating, =2.6.3, =2.1.0-incubating, =2.0.0-rc1-incubating, =2.10.4 and more Sour...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.streamnative.oss:pulsar-jms-filters (4.0.5) +8 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (3.0.0)

org.apache.pulsar:pulsar-websocket MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-websocket and may be impacted: - com.datastax.oss:pulsar-jms-filters =4.0.0, =4.0.1 - io.streamnative.oss:pulsar-jms-filters...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.1) +7 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (>=2.11.0, <=2.11.1)

org.apache.pulsar:pulsar-websocket MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2023-37544 Source advisory: MEND:CVE-2023-37544...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.streamnative.oss:pulsar-jms-filters (4.0.5) +8 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (3.0.0)

org.apache.pulsar:pulsar-websocket MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-websocket and may be impacted: - com.datastax.oss:pulsar-jms-filters =4.0.0, =4.0.1 - io.streamnative.oss:pulsar-jms-filters...

PT-2023-32776

Name of the Vulnerable Software and Affected Versions Sitefinity affected versions not specified Description A malicious user could potentially use the Sitefinity system for the distribution of phishing emails. Recommendations At the moment, there is no information about a newer version that...

New MetaStealer malvertising campaigns

MetaStealer is a popular piece of malware that came out in 2022, levering previous code base from RedLine. Stealers have become a very hot commodity in the criminal space, so much so that there is competition between various groups. Threat actors have primarily used malspam as an infection vector...

io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final), org.infinispan:infinispan-cachestore-jdbc (>=13.0.0.cr1, <=14.0.24.final) +16 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=13.0.0.cr1, <=14.0.24.final)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =13.0.0.cr1, =2.5.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =14.0.10.final, =13.0.0.cr1, =14.0.24.final and more...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-javadoc-all (>=15.0.0.dev01, <=15.0.0.dev06) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-sql MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: MEND:CVE-2023-5384...

org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06) +10 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source...

Debian: Security Advisory (DSA-5578-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5579-1] freeimage security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5579-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 17, 2023 https://www.debian.org/security/faq -...

PikaBot distributed via malicious search ads

During this past year, we have seen an increase in the use of malicious ads malvertising and specifically those via search engines, to drop malware targeting businesses. In fact, browser-based attacks overall have been a lot more common if we include social engineering campaigns. Criminals have...

Django Denial-of-Service

The vulnerability of the Django web application framework is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack remotely...

FakeSG campaign, Akira ransomware and AMOS macOS stealer

Introduction The crimeware landscape is diverse. Cybercriminals try to capitalize on their victims in every possible way by distributing various types of malware designed for different platforms. In recent months, we have written private reports on a wide range of topics, such as new cross-platfo...

Schweitzer Engineering Laboratories SEL-411L

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schweitzer Engineering Laboratories Equipment : SEL-411L Vulnerability : Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION Successful exploitation of this vulnerability...

IT threat evolution in Q3 2023. Mobile statistics

IT threat evolution in Q3 2023 IT threat evolution in Q3 2023. Non-mobile statistics IT threat evolution in Q3 2023. Mobile statistics These statistics are based on detection verdicts of Kaspersky products received from users who consented to providing statistical data. Quarterly figures Accordin...

Apache ActiveMQ Deserialization of Untrusted Data vulnerability

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

CVE-2022-41678

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...