Splunk Enterprise 9.0.0 < 9.0.9, 9.1.0 < 9.1.4, 9.2.0 < 9.2.1 (SVD-2024-0302)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-0302 advisory. - In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL...

WooCommerce < 8.6 - Contributor+ Private/Draft Products Access

Description The plugin does not prevent users with at least the contributor role from leaking products they shouldn't have access to. e.g. private, draft and trashed products 1. ADMIN: Install WooCommerce 2. ADMIN: Add products of various visibility and statuses including Publish, Draft, Private,...

Malicious code in flow-code-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9258acb8507f9f496025b3b1cd2293980746d866319fd79ef9277564a474495a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in polaris-resource-list-examples

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in flow-code-examples

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1119 Malicious code in flow-code-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9258acb8507f9f496025b3b1cd2293980746d866319fd79ef9277564a474495a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

openSUSE: Security Advisory for libqt5 (SUSE-SU-2023:4951-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2024-26280 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2024-26280 Source advisory: OSV:GHSA-6XWF-XVF3-V459...

NIST Cybersecurity Framework 2.0

NIST has released version 2.0 of the Cybersecurity Framework: The CSF 2.0, which supports implementation of the National Cybersecurity Strategy, has an expanded scope that goes beyond protecting critical infrastructure, such as hospitals and power plants, to all organizations in any sector. It al...

Dawa pharma 1.0-2022 - Multiple SQL Injection Vulnerabilities

Title: dawa-pharma-1.0-2022 Multiple-SQLi Author: nu11secur1ty Vendor: https://www.mayurik.com/ Software: https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download Reference: https://portswigger.net/web-security/sql-injection Description: The email parameter appears t...

Types of SaaS Applications: Categories and Examples

By Uzair Amir Learn about different types of SaaS solutions and the most widely used SaaS categories to create your own… This is a post from HackRead.com Read the original post: Types of SaaS Applications: Categories and Examples...

PassBreaker - Command-line Password Cracking Tool Developed In Python

PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features Wordlist-based password cracking Brute force password cracking Support for multiple hash...

ch.qos.logback:logback-access (0.9.10), ch.qos.logback:logback-classic (0.9.10) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.10)

ch.qos.logback:logback-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.10 - ch.qos.logback:logback-classic 0.9.10 -...

ch.qos.logback:logback-access (0.9.26), ch.qos.logback:logback-classic (0.9.26) +126 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.26)

ch.qos.logback:logback-core MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.26 - ch.qos.logback:logback-classic 0.9.26 -...

ch.qos.logback:log4j-bridge (0.9.4), ch.qos.logback:logback-access (0.9.4) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.4)

ch.qos.logback:logback-core MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.4 - ch.qos.logback:logback-access 0.9.4 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.9), ch.qos.logback:logback-access (0.9) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9)

ch.qos.logback:logback-core MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9 - ch.qos.logback:logback-access 0.9 - ch.qos.logback:logback-classic 0.9 -...

ch.qos.logback:logback-examples (0.9.24), com.alibaba.citrus:citrus-test-all (>=3.0.7, <=3.1.0) +63 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.24)

ch.qos.logback:logback-classic MAVEN version 0.9.24 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.24 - com.alibaba.citrus:citrus-test-all =3.0.7, =1.0.0.4,...

ch.qos.logback:logback-examples (0.9.11), org.coosproject.examples:ping-impl (>=1.0.0, <=1.3.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.11)

ch.qos.logback:logback-classic MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.11 - org.coosproject.examples:ping-impl =1.0.0, =1.3.1 Source...

ch.qos.logback:log4j-bridge (0.8), ch.qos.logback:logback-access (0.8) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.8)

ch.qos.logback:logback-core MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.8 - ch.qos.logback:logback-access 0.8 - ch.qos.logback:logback-classic 0.8 -...

ch.qos.logback:logback-examples (0.9.10) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.10)

ch.qos.logback:logback-classic MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.10 Source cves: CVE-2023-6378 Source advisory:...