134 matches found
CVE-2023-30968
CVE-2023-30968 corresponds to a stored cross-site scripting (XSS) issue in Gotham Gaia services (Palantir Gotham Gaia). The vulnerability allows an attacker to bypass Content Security Policy (CSP) and inject a persistent XSS payload on the stack. Documents consistently describe it as a stored XSS...
PT-2024-12247 · Unknown · Gotham Gaia
Name of the Vulnerable Software and Affected Versions: Gotham Gaia affected versions not specified Description: A stored cross-site scripting XSS issue was discovered, allowing an attacker to bypass Content Security Policy CSP and achieve a persistent cross-site scripting payload. Recommendations...
Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset
Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset. According to CloudSEK, the critical exploit facilitates session persistence and...
gaia-x.eu Improper Access Control vulnerability OBB-3824534
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors to conduct ransomware, data exfiltration, and password recovery attacks. "Starting from a single compromised machine, threat actors could...
The vulnerability of the cgi-bin/hosts_dns.tcl component of the Gaia Portal web interface allows a perpetrator to execute arbitrary commands on the Quantum Security Gateways and Quantum Appliances operating systems.
The vulnerability of the cgi-bin/hostsdns.tcl web interface for configuring the Gaia Portal on the operating system of Quantum Security Gateways and Quantum Appliances is related to the failure to eliminate special elements used in the operating system’s command processing when handling the...
Checkpoint Gaia Portal R81.10 Remote Command Execution Vulnerability
========================= Exploit Title: Hostname injection leads to Remote Code Execution RCE Authenticated Product: Gaia Portal Vendor: Checkpoint Vulnerable Versions: R81.20 Take 14, R81.10 Take 95, R81 Take 82 and R80.40 Take 198 Tested Version: R81.10 take 335 Advisory Publication: July 27,...
Checkpoint Gaia Portal R81.10 Remote Command Execution
========================= Exploit Title: Hostname injection leads to Remote Code Execution RCE Authenticated Product: Gaia Portal Vendor: Checkpoint Vulnerable Versions: R81.20 Take 14, R81.10 Take 95, R81 Take 82 and R80.40 Take 198 Tested Version: R81.10 take 335 Advisory Publication: July 27,...
CVE-2023-28130
Local user may lead to privilege escalation using Gaia Portal hostnames page...
CVE-2023-28130
Local user may lead to privilege escalation using Gaia Portal hostnames page...
Privilege escalation
Local user may lead to privilege escalation using Gaia Portal hostnames page...
CVE-2023-28130
Local user may lead to privilege escalation using Gaia Portal hostnames page...
CVE-2023-28130
Local user may lead to privilege escalation using Gaia Portal hostnames page...
CVE-2023-28130
CVE-2023-28130 affects Check Point Gaia Portal. The root cause is improper handling of the hostname parameter in Gaia Portal’s hostnames page, enabling command injection and local privilege escalation. Public material indicates affected Gaia Portal/release lines (R81.x to R81.20, R80.40) with in-...
Quantum Appliances 命令注入漏洞
Quantum Appliances is a backup appliance from Quantum. A security vulnerability exists in Quantum Appliances, Quantum Security Gateways versions R80.20SP, R80.30SP, R80.40, R81, R81.10, R81.20, which stems from the fact that a local user's use of the Gaia Portal hostnames page may lead to Privile...
Check Point Response to CVE-2023-28130 - Hostname command injection in Gaia Portal
Symptoms - Local user may lead to privilege escalation using Gaia Portal "Hosts and DNS" page. This issue received the ID CVE-2023-28130. Solution This problem was fixed. The fix adds more validations on user input and is included starting from: Check Point R82 Jumbo Hotfix Accumulator for R81.20...
PT-2023-4187 · Check Point · Check Point Gaia Portal +1
Name of the Vulnerable Software and Affected Versions: Check Point Gaia Portal affected versions not specified Description: The issue is related to a command injection vulnerability in the Check Point Gaia Portal. It allows a local user to potentially escalate privileges using the Gaia Portal...
Malicious code in gaia-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b385e2734a4037223f13b44d1f3e0f31fb3b29a433cfce0ced0ff802bf0f9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gaia-dialog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 371bc71161cb01b83fe4e01010df2ba01f573b504e8617e288e58d5f431dbefb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3266 Malicious code in gaia-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b385e2734a4037223f13b44d1f3e0f31fb3b29a433cfce0ced0ff802bf0f9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...