CVE-2018-19859

CVE-2018-19859 - Prova di concetto RCE Questo repository contiene una prova di concetto per l'esecuzione remota di codice RCE contro OpenRefine 3.1-beta. Sfruttando una vulnerabilità di directory traversal all'interno della funzionalità Create Project, CVE-2018-19859, un utente malintenzionato pu...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contém uma vulnerabilidade de Server-Side Request Forgery SSRF, que permite que usuários não autorizados explorem o sistema, potencialmente levando ao acesso não autorizado a recursos internos e à divulgação de arquivos sensíveis. A causa raiz dessa...

EUVD-2018-12726

Malware in sbrugna...

EUVD-2019-13215

Malware in sbrugna...

EUVD-2023-2096

Malicious code in bioql PyPI...

EUVD-2024-3105

Malicious code in bioql PyPI...

EUVD-2024-0538

Malicious code in bioql PyPI...

EUVD-2024-2990

Malicious code in bioql PyPI...

EUVD-2024-2917

Malicious code in bioql PyPI...

EUVD-2024-3067

Malicious code in bioql PyPI...

EUVD-2024-2977

Malicious code in bioql PyPI...

EUVD-2023-2337

Malicious code in bioql PyPI...

EUVD-2024-3113

Malicious code in bioql PyPI...

EUVD-2023-2577

Malicious code in bioql PyPI...

EUVD-2024-2918

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-41401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine = v3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2023-41886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any...

Linux Distros Unpatched Vulnerability : CVE-2023-37476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2023-41887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any...

CVE-2023-37476

OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the OpenRefine process if a user can be convinced to import it. The vulnerability exists in all versions of...