EUVD-2023-1699

Malicious code in bioql PyPI...

EUVD-2024-38294

Malicious code in bioql PyPI...

EUVD-2024-39295

Malicious code in bioql PyPI...

EUVD-2024-0446

Malicious code in bioql PyPI...

EUVD-2024-0353

Malicious code in bioql PyPI...

EUVD-2022-38806

Malicious code in bioql PyPI...

EUVD-2024-2404

Malicious code in bioql PyPI...

EUVD-2022-7065

Malicious code in bioql PyPI...

EUVD-2017-0302

Malicious code in bioql PyPI...

EUVD-2022-5249

Malicious code in bioql PyPI...

EUVD-2022-7142

Malicious code in bioql PyPI...

EUVD-2023-1744

Malicious code in bioql PyPI...

EUVD-2024-45523

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.7. Vulnerability Details CVEID:CVE-2022-44566 DESCRIPTION: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed intege...

Linux Distros Unpatched Vulnerability : CVE-2019-25025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The activerecord-sessionstore aka Active Record Session Store component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering...

Exploit for Improper Input Validation in Rubyonrails Rails

🔐 Black Box Penetration Test on DVWA This repository document...

Linux Distros Unpatched Vulnerability : CVE-2024-32978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified ...

Thor 操作系统命令注入漏洞

Thor is a Ruby on Rails open source toolkit for building command line interfaces. An operating system command injection vulnerability exists in versions of Thor prior to 1.4.0, which stems from constructing insecure shell commands from library input and could lead to command injection...

The vulnerability of the Ruby on Rails software platform, related to improper authentication, allows a hacker to trigger a service failure.

The vulnerability of the Ruby on Rails software platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the Ruby on Rails software platform, related to the manipulation of cross-site requests, allows attackers to send CSRF tokens to incorrect domains.

The vulnerability of the Ruby on Rails software platform is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to remotely send CSRF tokens to incorrect domains...