Exploit for SQL Injection in Langchain

Proof of Concept for Langchain CVE-2024–8309 Vulnerability...

CVE-2024-7254 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, kube-fluentd-operator, kafka, camunda-zeebe, apache-nifi, opensearch, ruby3.2-fluentd-kubernetes-daemonset, kserve-modelmesh, confluent-kafka, celeborn, thingsboard, trino, hadoop-fips, emsdk, ruby3.3-fluentd-kubernetes-daemonset,...

JAW - A Graph-based Security Analysis Framework For Client-side JavaScript

An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the EsTree SpiderMonkey Spec. JAW can be used for analyzing the client-side of web applications and JavaScript-based programs. This project is licensed under GNU AFFERO GENERAL PUBLIC LICEN...

This Week in Spring - May 14th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week's highlights in the Spring ecosystem emphasize the ongoing advancements and applications of Spring AI. The discussions range from exploring the impressive VectorStore abstraction and enhanced structured output suppo...

Neo4j Detection

Binary data neo4jdetect.nbin...

Neo4j < 5.19.0 Privilege Mishandling (CVE-2024-34517)

According to its its self-reported version number, the version of Neo4j running on the remote host is a version prior to 5.19.0. It is, therefore, affected by a privilege mishandling vulnerability in the Cypher component which mishandles IMMUTABLE privileges. Note that Nessus has not tested for...

GHSA-P343-9QWP-PQXV vulnerabilities

Vulnerabilities for packages: neo4j...

GHSA-P343-9QWP-PQXV vulnerabilities

Vulnerabilities for packages: neo4j...

GHSA-P343-9QWP-PQXV Neo4j Cypher component mishandles IMMUTABLE privileges

The Cypher component in Neo4j between v.5.0.0 and v.5.19.0 mishandles IMMUTABLE...

Neo4j Cypher component mishandles IMMUTABLE privileges

The Cypher component in Neo4j between v.5.0.0 and v.5.19.0 mishandles IMMUTABLE...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2024-34517 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517: Modification of Assumed-Immutable Data (MAID)

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517

Summary: CVE-2024-34517 affects the Cypher component in Neo4j 5.0.0–5.19.0, where IMMUTABLE privileges can be mishandled in certain scenarios if an attacker already has admin access. The issue is documented across multiple sources (CVE entry, RH advisory, GHSA, OSV references). Impact (as stated)...

Neo4j 安全漏洞

Neo4j is a Java-based and fully ACID-compatible graphical database from Neo4j, Inc. that supports data migration, add-ons, and more. A security vulnerability exists in Neo4j versions prior to 5.19.0 that stems from the Cypher component incorrectly handling IMMUTABLE permissions...

PT-2024-25944

Name of the Vulnerable Software and Affected Versions Neo4j versions 5.0.0 through 5.19.0 Description The Cypher component in Neo4j mishandles IMMUTABLE privileges. Recommendations For versions 5.0.0 through 5.19.0, update to a version that contains a fix for this issue. At the moment, there is n...