1288 matches found
domain-locker
Domain Locker El centro principal para todos tus nombres de dominio 🌐domain-locker.com Contenido Acerca de Captura de pantalla Características Demo en vivo Cómo empezar Domain-Locker.com Autoalojamiento Desarrollo Configuración de la aplicación Arquitectura Contribuir Atribuciones Licencia Acerca...
CVE-2024-54378
CVE-2024-54378 Quietly Insights = 1.2.2 - Autorización faltante para actualización arbitraria de opciones por parte de usuarios autenticados Suscriptor+ Descripción El plugin Quietly Insights para WordPress es vulnerable a la modificación no autorizada de datos que puede llevar a una escalada de...
Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect
The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...
advisories
소개 트위터: @justinsteven 블로그: https://www.justinsteven.com/ 권고Advisories 최신순으로 나열됨. 전체 권고를 읽으려면 제목을 클릭하세요. Gartner Peer Insights Widget postMessage DOM XSS 공개 날짜: 2023-02-03 Gartner Peer Insights Widget은 호스트명에 "gartner.com"이 포함된 모든 사이트예: https://gartner.com.attacker.com에서 온 postMessage 메시지로 트리거될 수 있...
bitbucket-iac-scan
Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...
CVE-2026-85173
n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...
CVE-2026-85173 n8n before 2.36.2 Missing Authorization via Insights API
n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...
EUVD-2026-70408
n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...
CVE-2026-85173
n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes . Authenticated users holding insights scopes can supply arbitrary projectId parameters to retrieve workflow names and execution statistics from projects they are not members of, effect...
CVE-2026-85173 n8n before 2.36.2 Missing Authorization via Insights API
n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitrary projectId parameters to retrieve...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...
MAL-2026-14497 Malicious code in svelte-insights-streak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837ce89a955f11d9e25b59ca9b59b96ffef7d05338f95b42d1fcd062c7b543 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in svelte-insights-streak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837ce89a955f11d9e25b59ca9b59b96ffef7d05338f95b42d1fcd062c7b543 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
EUVD-2026-57688
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...
CVE-2026-71846 Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...
CVE-2026-71846
CVE-2026-71846 – Insights-client : A flaw in insights-client exposes cluster-wide Secrets by binding the component’s ServiceAccount to a ClusterRole with get/list/watch on all Secrets, while the code only requires access to a single Secret. This privilege escalation means that if the insights-cli...
CVE-2026-71846 Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...