CVE-2024-6861 Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API...

CVE-2024-6861 Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API...

MAL-2024-10444 Malicious code in web3-provdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d942789866e82a0d3c0ef2d9af0d928bfcc087ed319f5c5c2155c4a621d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10443 Malicious code in web-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e01b5c7e434c166fc697d6c13f5aee669e57506125bea0d9639ef863220d2076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10441 Malicious code in wb3-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5911c19ddad04766063cf6b5a3e8017706df6574b0c4886475a5af3c1a8c65cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10442 Malicious code in web-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a820694573667cc1e95ff7cda09c9a823901bbb9ab2cf03ee94f500ae3fe854 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10431 Malicious code in ethgass-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e278f81839ea2e511d9b9d90880271f216f0694163070eb39cba33d0fd3e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10433 Malicious code in gnache-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb71996ea970cd158615c28425049fe75cde7631e0e94d80887b9df113ab876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10432 Malicious code in ganach-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d3e3f61f335dc7d34337825d521731cfa9030c28efb0b1dc3c13cba719d89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10439 Malicious code in trufel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d86a742d041b19705edba4466a1fbcb6df551d110ed63b40b34e222b6e8821e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

travels-java-api 安全漏洞

travels-java-api is an API for travel management from the individual developer Mariana Azevedo. A security vulnerability exists in travels-java-api version 5.0.1 and earlier, which stems from the use of hard-coded encryption keys in the doFilterInternal function in the JWT Secret Handler componen...

PT-2024-37910 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: foreman affected versions not specified Description: A disclosure of sensitive information flaw was found in foreman via the "GraphQL API". If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin...

grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend

A flaw was found in Google gRPC due to HPACK table poisoning between the proxy and backend so that other clients see failed requests, resulting in a denial of service. This occurs because the error status for a misencoded header is not cleared between header reads, resulting in subsequent...

MAL-2024-10393 Malicious code in pupeteerreqintercepter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a217fdabdcda03ee1d01755ca128aecf9f98f7c3f9883f4f39eb1a0fe00e799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10394 Malicious code in pupeteerscreenrecordr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86062d919b5202bbb695b8b4f64c2ca5536f0e180f47f0e88e37a7386a9b41eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10392 Malicious code in pupeteer-screen-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b0093b526d3b4549702cd0e61fb30db7ac24b4896657f7453d1150c91217bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10389 Malicious code in pupeteer-har (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29c5aec1082b7aaaca7ba03715be8a3319d84027ef3fff58e5d808622a6bc074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10391 Malicious code in pupeteer-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d95a80070e681d1d0484386220f2cf4e4a5ddb369927c731fabf829893c8bdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10399 Malicious code in puppeteercluser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115c66735b84ea5c7e1ca9cd5becce7a282f7a736ec3706af7c56b304b9276a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10388 Malicious code in pupeteer-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a4104c19abe3998b35fd4b5abd138a490a1e4c0642ce726b1401f544ae34f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...