The vulnerability of the Flask-Security-Too security management tool lies in the redirection of URLs to an unreliable website, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Flask-Security-Too security management tool is related to the redirection of URLs to an unreliable website when the “next” request parameter is processed. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address remotely...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that results from a denial of service when parsing the IPv6 extended header when the WLAN firmware receives an IPv6 packet containing IPPROTONONE as the next header...

Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

SUSE CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

GHSA-672H-6X89-76M5 Open redirect vulnerability in Flask-Security-Too

An open redirect vulnerability in the python package Flask-Security-Too =2.1.0 the autocorrectlocationheader configuration was changed to False - which means that location headers in redirects are relative by default. Thus, this issue may impact applications that were previously not impacted, if...

CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

PYSEC-2023-248

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

Flask Middleware Flask-security Security Vulnerabilities

Flask Middleware Flask-security is a Python-based codebase from the Flask Middleware organization that provides security features for Flask applications. Flask Middleware Flask-security A security vulnerability exists in Flask-Security-Too 5.3.2 and earlier versions that originates from a...

Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8734 Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

Design/Logic Flaw

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component...

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. Notes Author| Note ---|--- iconstantin | The heimdal package in...

Heimdal security breach

Heimdal is a Kerberos implementation and security program from Heimdal Open Source. A security vulnerability exists in Heimdal that originated from allowing an attacker to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via the Next-Gen Antivirus component...

CVE-2023-29486

The CVE-2023-29486 entry concerns Heimdal Thor agent for Windows, affected in versions 3.4.2 and earlier than 3.7.0. The issue allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via the Next-Gen Antivirus component. Red Hat and Ubuntu ecos...

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...