1609 matches found
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cookie by PHP applications...
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cookie by PHP applications...
CVE-2024-32649
creationtimestamp| type| source ---|---|--- 2024-04-25 13:00:55+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-5jrj-52x8-m64h...
CVE-2024-32648
creationtimestamp| type| source ---|---|--- 2024-04-25 12:46:04+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-m2v9-w374-5hj9...
CVE-2024-32645
creationtimestamp| type| source ---|---|--- 2024-04-25 12:36:44+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-xchq-w5r3-4wg3...
CVE-2024-32472
creationtimestamp| type| source ---|---|--- 2024-04-17 21:15:16+00:00| published-proof-of-concept| https://github.com/excalidraw/excalidraw/security/advisories/GHSA-m64q-4jqh-f72f...
CVE-2024-4340
creationtimestamp| type| source ---|---|--- 2024-04-15 20:21:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2m57-hf25-phgg...
CVE-2024-25354
creationtimestamp| type| source ---|---|--- 2024-03-28 00:31:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cqfh-c4c5-c2hg...
GHSA-PR2M-PX7J-XG65
creationtimestamp| type| source ---|---|--- 2024-03-13 16:46:45+00:00| seen| https://t.me/ctinow/206877...
GHSA-RJ98-CRF4-G69W
creationtimestamp| type| source ---|---|--- 2024-03-07 23:47:20+00:00| seen| https://t.me/ctinow/202890...
BIT-OPENFIRE-2023-32315
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...
eth-abi is vulnerable to recursive DoS
This is related to recent ZST stuff https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g, but it's a different one. Basically a recursive pointer issue py from ethabi import decode payload =...
GHSA-6V6W-H8M6-7MV2
creationtimestamp| type| source ---|---|--- 2024-03-01 00:36:59+00:00| seen| https://t.me/ctinow/197168...
GHSA-3HRR-XWVG-HXVR
creationtimestamp| type| source ---|---|--- 2024-02-29 21:26:58+00:00| seen| https://t.me/ctinow/197022...
CVE-2024-25713
creationtimestamp| type| source ---|---|--- 2024-02-29 03:33:18+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-whx6-m9j4-w2m2...
GHSA-H7R6-8QMM-HJ5R
creationtimestamp| type| source ---|---|--- 2024-02-28 19:46:46+00:00| seen| https://t.me/ctinow/195799...
ASA-2024-004: Default configuration param for Evidence may limit window of validity
ASA-2024-004: Default configuration param for Evidence may limit window of validity Component: CometBFT Criticality: Low Affected versions: All Affected users: Validators, Chain Builders + Maintainers Summary A default configuration in CometBFT has been found to be small for common use cases, and...
GHSA-RJ3G-8Q6P-63PC
creationtimestamp| type| source ---|---|--- 2024-02-22 11:37:05+00:00| seen| https://t.me/ctinow/190643...