1358 matches found
MAL-2025-28132 Malicious code in octopus-acorn-qox411-project (npm)
The package octopus-acorn-qox411-project was found to contain malicious code...
MAL-2025-28133 Malicious code in octopus-app (npm)
The package octopus-app was found to contain malicious code...
MAL-2025-24979 Malicious code in lava-octopus-tna469-project (npm)
The package lava-octopus-tna469-project was found to contain malicious code...
MAL-2025-39727 Malicious code in xerox-octopus-blz884-project (npm)
The package xerox-octopus-blz884-project was found to contain malicious code...
MAL-2025-39120 Malicious code in whale-octopus-kwx075-project (npm)
The package whale-octopus-kwx075-project was found to contain malicious code...
MAL-2025-28142 Malicious code in octopus-whirlpool-ejn271-project (npm)
The package octopus-whirlpool-ejn271-project was found to contain malicious code...
MAL-2025-28138 Malicious code in octopus-hollow-bvz446-project (npm)
The package octopus-hollow-bvz446-project was found to contain malicious code...
MAL-2025-14922 Malicious code in aspen-octopus-iaj797-project (npm)
The package aspen-octopus-iaj797-project was found to contain malicious code...
Malicious code in octopus-dandelion-une212-project (npm)
The package octopus-dandelion-une212-project was found to contain malicious code...
[SECURITY] Fedora 41 Update: rust-sequoia-octopus-librnp-1.11.1-1.fc41
Reimplementation of RNP's interface using Sequoia for use with Thunderbird...
Fedora 41 : rust-sequoia-octopus-librnp (2025-71b9c49854)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-71b9c49854 advisory. Update to version 1.11.1. This version includes a fix for a potential DoS-via-zip-bomb issue. Release notes:...
Fedora: Security Advisory (FEDORA-2025-71b9c49854)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-51c16d6993)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : rust-sequoia-octopus-librnp (2025-51c16d6993)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-51c16d6993 advisory. Update to version 1.11.1. This version includes a fix for a potential DoS-via-zip-bomb issue. Release notes:...
CVE-2024-7998
In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan...
CVE-2024-0784
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/role/list. The manipulation of the argument dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-0890
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-4456
In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page...
CVE-2024-4226
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed...