EUVD-2021-19556

Malware in sbrugna...

EUVD-2024-22274

Malicious code in bioql PyPI...

CVE-2024-42612

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...

CVE-2024-24911

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache...

CVE-2024-24911

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache...

CVE-2024-42619

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...

CVE-2024-42612

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version exists cross-site request forgery vulnerability, the vulnerability stems from /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com does not adequately verify whether the request is from ...

CVE-2024-42619

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/domainmanagement.php?whitelistadd does not adequately verify that the request comes from a trusted user , an...

CVE-2024-42619

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...

CVE-2024-42619

Pligg CMS v2.0.2 contains a CSRF vulnerability in /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com. The issue stems from insufficient verification, enabling forged requests to manipulate the whitelist. CVSSv3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 8.8, HIGH). Connect...

SUSE-SU-2021:2923-1 Security update for xen

This update for xen fixes the following issues: Update to Xen 4.13.3 general bug fix release bsc1027519. Security issues fixed: - CVE-2021-28693: xen/arm: Boot modules are not scrubbed bsc1186428 - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling bsc1186429 - CVE-2021-008...

OpSec. Expanding your search: Hunting domains

In the last few blogs I have introduced OSINT and OpSec, talked about leaky images and using Google Dorks and how to use those techniques specifically to examine your own corporate OpSec. One of the most important aspects is to understand how wide your target expands. Many companies own multiple...

[SECURITY] Fedora 29 Update: mod_md-2.0.8-3.fc29

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol RFC Draft to automate certificate provisioning. These will be configured for managed domains and their virtual hosts automatically. This includes renewal of certificates befor...

DomainMod Cross-Site Request Forgery Vulnerability (CNVD-2019-32048)

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. DomainMod suffers from a cross-site request forgery vulnerability. An attacker could exploit this vulnerability to change the administrator password...

DomainMod Cross-Site Request Forgery Vulnerability

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. DomainMod suffers from a cross-site request forgery vulnerability. An attacker could exploit the vulnerability to change a read-only user to an administrator...

DomainMod Cross-Site Request Forgery Vulnerability (CNVD-2019-32049)

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. DomainMod suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to add an administrator account...

CVE-2018-18808

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

Race condition

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...