MAL-2022-3267 Malicious code in gaia-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 371bc71161cb01b83fe4e01010df2ba01f573b504e8617e288e58d5f431dbefb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29002

A Cross-Site Request Forgery CSRF in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add...

XXL-JOB 跨站请求伪造漏洞

XXL-JOB is a lightweight distributed task scheduling platform whose core design goals are rapid development, simple learning, lightweight, and easy scalability. XXL-JOB version 2.3.0 is vulnerable to cross-site request forgery due to a lack of filtering and restrictions in the component...

CVE-2021-30361

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS...

CVE-2021-30361

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS...

CVE-2021-30361

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS...

Command injection

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS...

CVE-2021-30361

The vulnerability CVE-2021-30361 affects the Check Point Gaia Portal GUI Clients, where authenticated administrators with GUI Clients permissions can inject a command that executes on the Gaia OS. The issue stems from an insecure interaction in the GUI Clients feature, enabling local command inje...

CVE-2021-30361

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS...

Check Point Gaia Portal 操作系统命令注入漏洞

Check Point Gaia Portal is a web-based advanced interface for Gaia platform configuration from Check Point Israel. A security vulnerability exists in the GUI client of Check Point Gaia Portal, which is exploited by attackers to run commands on Gaia OS...

Check Point Response to CVE-2021-30361 - Gaia Portal Authenticated Command Injection

Symptoms - The "Security Management GUI Clients" feature in Check Point Gaia Portal allows authenticated administrators with permission for the GUI Clients settings to inject a CLI command that can run on the Gaia OS. This issue was discovered and responsibly disclosed by Christophe Schleypen of...

Check Point Response to CVE-2022-21449 - Java "Psychic Signatures"

Symptoms - On April 20, 2022, security researcher Neil Madden published a blog post in which he provided details about a newly disclosed vulnerability in Java, CVE-2022-21449 or "Psychic Signatures". This security vulnerability originates in an incorrect implementation of the ECDSA signature...

Check Point response to CVE-2021-43267

Symptoms A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent inter-process communication. An attacker, with the ability to send TIPC messages to the target, can cause memory corruption and escalate privileges on the target system. Cause This...

PT-2021-3606 · Check Point +3 · Gaia +4

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Check Point GAiA affected versions not specified Description: The issue is related to a buffer overflow in the ZeroMQ library, which can be exploited by a remote attacker to access confidential data, compromise...

gaia-icep.com Cross Site Scripting vulnerability OBB-1284607

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Check Point Gaia Operating System Administrator password truncation (sk156192)

The remote host is running a version of the Gaia Operating System which is affected by multiple vulnerabilities involving the Linux Kernel's handling of TCP networking. - It is possible to overflow the 16bit width of TCPSKBCBskb-tcpgsosegs which could result in the system crashing resulting in a...

Check Point Gaia Operating System Open Interfaces With Default Password (sk145612)

The remote host is running a version of Gaia Operating System that is vulnerable to attacks after a CPUSE clean install and before completing the First Time Wizard. This is due to the administrator password being reset during the CPUSE clean installation process without also resetting interface...

Check Point Gaia Operating System Administrator password truncation (sk155172)

The remote host is running a version of the Gaia Operating System which is affected by a vulnerability. Administrators who set their password while firmware R77.20.85, R77.20.86 or R77.20.87 Build 990172921 were installed can authenticate to the SMB appliance using only the first 8 characters. Th...

PT-2018-1834 · Palo Alto Networks +9 · Pan-Os +12

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.9 and later PAN-OS versions prior to 6.1.22 PAN-OS versions prior to 7.1.20 PAN-OS versions prior to 8.0.13 PAN-OS versions prior to 8.1.5 Arista EOS affected versions not specified vEOS affected versions not specified...

Check Point Gaia Operating System Privilege Escalation

The remote host is running a version of Gaia OS which is affected by an issue where low privileged users authenticated to the Gaia clish shell may execute arbitrary code as admin / root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid107072; scriptversion"1.2";...