MAL-2022-1313 Malicious code in azure-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a111621146a85a7b02970681f36ea6df3a2210812fa555bf856546d44e00b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5280 Malicious code in perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c2c294b78552bae3263b495da7be1eda10abd3df85368d506e29835f8e507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c2c294b78552bae3263b495da7be1eda10abd3df85368d506e29835f8e507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-core-rest-pipeline-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf67e5c43edf5098eb403f68190a804f5534e504df9cce4108391b7d6f742c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1314 Malicious code in azure-core-rest-pipeline-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf67e5c43edf5098eb403f68190a804f5534e504df9cce4108391b7d6f742c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4396b5e4255c98c3adaa6e8c6927ef76c435d214321de5910eb4970c541e85d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2197 Malicious code in core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4396b5e4255c98c3adaa6e8c6927ef76c435d214321de5910eb4970c541e85d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multiple-inheritance-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78cfc2383f9411d2efdd19966250309bac7347c428ed4ac4034231a7997db39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1639 Malicious code in body-string-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5906e08fd5b0e690abbc491c404720f69bfaa3ba84fae8bf7938522c6ac64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GiveWP < 2.21.0 - Donor Information Disclosure

The plugin exposes a REST endpoint to unauthenticated users and disclosing donor information...

The vulnerability relates to Rest interfaces of the Access Mgr component within the Oracle Access Manager software platform of Oracle Fusion Middleware. This vulnerability allows an attacker to gain unauthorized access to protected information.

The vulnerability of Rest interfaces for Oracle Access Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted HTTP requests...

Jupyter server Token bruteforcing

Affects: Notebook and Lab between 6.4.0?potentially earlier and 6.4.11 currently latest. Jupyter Server =1.16.0. If I am correct about the responsible code it will affect Jupyter-Server 1.17.0 and 2.0.0a0 as well. Description: If notebook server is started with a value of rootdir that contains th...

Cross site scripting

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

PYSEC-2022-211

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

CVE-2022-29241

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

CVE-2022-29241 Known or guessable hidden files may be accessed in Jupyter Server

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

CVE-2022-29241

CVE-2022-29241 affects Jupyter Server (backend for Jupyter web apps) prior to 1.17.1. If notebook_server is started with root_dir containing the starting user’s home directory, an authenticated user can leak the start-time access token via the REST API by guessing/brute-forcing the server PID. Th...

CVE-2022-29241

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5251 Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...