5115 matches found
GHSA-JWV5-8MQV-G387 vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
GHSA-WX8Q-4GM9-RJ2G
creationtimestamp| type| source ---|---|--- 2024-03-15 17:47:14+00:00| seen| https://t.me/ctinow/208974...
GHSA-G623-JCGG-MHMM
creationtimestamp| type| source ---|---|--- 2024-03-15 17:47:13+00:00| seen| https://t.me/ctinow/208973...
GHSA-H574-6646-VFXX
creationtimestamp| type| source ---|---|--- 2024-03-15 15:22:19+00:00| seen| https://t.me/ctinow/208849...
GHSA-QMGX-J96G-4428 vulnerabilities
Vulnerabilities for packages: opensearch...
GHSA-R978-9M6M-6GM6 vulnerabilities
Vulnerabilities for packages: tez, solr, spark, confluent-common-docker, confluent-kafka, trino...
GHSA-R978-9M6M-6GM6 vulnerabilities
Vulnerabilities for packages: confluent-common-docker, trino, tez, confluent-kafka, solr...
GHSA-JG2G-4RJG-CMQH
creationtimestamp| type| source ---|---|--- 2024-03-14 22:47:05+00:00| seen| https://t.me/ctinow/208247...
GHSA-8832-4MM5-X2R6
creationtimestamp| type| source ---|---|--- 2024-03-14 21:46:47+00:00| seen| https://t.me/ctinow/208196...
CVE-2024-28181 Arbitrary method invocation turbo_boost-commands
turboboost-commands is a set of commands to help you build robust reactive applications with Rails & Hotwire. TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the existing checks aren't as robust as they should...
CVE-2024-28181
CVE-2024-28181 affects the TurboBoost Commands library. The issue is an insufficiently robust permission check that can allow an attacker to invoke more public methods on Command classes than intended, risking arbitrary code execution within affected applications. Concrete details in connected so...
GHSA-XP2R-G8QQ-44HH
creationtimestamp| type| source ---|---|--- 2024-03-13 23:11:29+00:00| seen| https://t.me/ctinow/207277...
GHSA-7G97-7R3C-5CC6
creationtimestamp| type| source ---|---|--- 2024-03-13 19:26:50+00:00| seen| https://t.me/ctinow/207050...
GHSA-7W75-32CG-R6G2 vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-V682-8VV8-VPWR vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-VMQV-47J8-GWV8
creationtimestamp| type| source ---|---|--- 2024-03-13 18:11:20+00:00| seen| https://t.me/ctinow/206977...
GHSA-78WX-JG4J-5J6G
creationtimestamp| type| source ---|---|--- 2024-03-13 16:46:43+00:00| seen| https://t.me/ctinow/206876...
CVE-2024-28121 Reflex arbitrary method call in stimulus_reflex
stimulusreflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rails over real-time websockets. In affected versions more methods than expected can be called on reflex instances. Being able to call some of them has security...
CVE-2024-28121
CVE-2024-28121 affects StimulusReflex. A websocket payload targeting a reflex can trigger arbitrary method calls on the reflex instance, because the server locates the method and uses it (via public_send) without strict validation, risking unsafe methods (e.g., instance_variable_set, system). Thi...