CVE-2024-47079 Unauthorized usage of remote hardware module because of missing channel verification

Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote...

[SECURITY] Fedora 39 Update: firefox-131.0-2.fc39

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 41 Update: pgadmin4-8.12-1.fc41

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

ALSA-2024:7700 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: 115.16/128.3 ESR firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service CVE-2024-9399 firefox: thunderbird: Memory safety...

Distro Linux Workbooth 访问控制错误漏洞

Distro Linux Workbooth is an open source application for Distro Linux. An access control error vulnerability exists in Distro Linux Workbooth version v2.5, which originates from allowing privileges to be elevated to the root user via manipulation of network configuration scripts...

Teedy 安全漏洞

Teedy is an open source, lightweight document management system for individuals and businesses from Teedy Open Source in France. A security vulnerability exists in Teedy version 1.11, which stems from vulnerability to cross-site scripting XSS attacks via the administration console...

Webkul Krayin CRM 安全漏洞

Webkul Krayin CRM is a free and open source CRM solution for small and medium-sized businesses from Webkul India. A security vulnerability exists in Webkul Krayin CRM v1.3.0 that stems from vulnerability to cross-site scripting XSS attacks...

Dynamic Dashboard 跨站脚本漏洞

Dynamic Dashboard is an open source dashboard by Lara Zeus. A cross-site scripting vulnerability exists in Dynamic Dashboard. An attacker could exploit this vulnerability to perform a cross-site scripting attack...

Saltcorn 路径遍历漏洞

Saltcorn is an extensible open source no-code database application builder from Saltcorn Open Source. A path traversal vulnerability exists in Saltcorn that stems from POST parameters that are not validated or cleaned up...

[SECURITY] Fedora 39 Update: chromium-129.0.6668.89-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 40 Update: chromium-129.0.6668.89-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the login functionality. Note: This only affects Open Source Edition and not OpenC3 COSMOS Enterprise Edition. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects...

CVE-2024-47183

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. If the Parse Server option allowCustomObjectId: true is set, an attacker that is allowed to create a new user can set a custom object ID for that new user that exploits the vulnerability and...

CVE-2024-47769

Summary: CVE-2024-47769 affects IDURAR, an open-source ERP/CRM. The vulnerability is in corePublicRouter.js where a public endpoint is accessible to unauthenticated users and user input is directly appended to a join statement, enabling a URL-encoded payload to be processed. This can allow an att...

CVE-2024-47769 IDURAR has a Path Traversal (unauthenticated user can read sensitive data)

IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is accessible to an unauthenticated user. The user's input is directly appended to the join statement...

Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

[SECURITY] Fedora 41 Update: firefox-131.0-2.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Parse Server 授权问题漏洞

Parse Server is an open source backend from Parse Platform Open Source that can be deployed to any infrastructure that can run Node.js. An authorization issue vulnerability exists in Parse Server. An attacker exploiting this vulnerability could gain access to specific roles...

NVIDIA TensorRT Detection

The Open Source Software OSS components of the NVIDIA TensorRT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208130;...

Malicious code in kupo-app-secure-store-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d04ed47c7e296896a93ec11ccbe851b0a3d33f3afe06d2aaba32be6263363a33 The OpenSSF Package Analysis project identified 'kupo-app-secure-store-plugin' @ 99.0.0 npm as malicious. It is considered malicious because: -...