Lucene search
+L

678 matches found

Prion
Prion
•added 2023/01/02 7:15 p.m.•23 views

Design/Logic Flaw

A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to...

7.5CVSS7.9AI score0.00823EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/02 6:36 p.m.•44 views

CVE-2016-15007 Centralized-Salesforce-Dev-Framework SOQL SObjectService.cls SObjectService injection

A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to...

5.5CVSS7.6AI score0.00823EPSS
SaveExploits0References3
CVE
CVE
•added 2023/01/02 6:36 p.m.•58 views

CVE-2016-15007

CVE-2016-15007 affects the Centralized-Salesforce-Dev-Framework, specifically the function SObjectService in src/classes/SObjectService.cls of the SOQL Handler. The vulnerability arises from incorrect manipulation of the orderDirection argument, leading to an injection. A fix is available as patc...

9.8CVSS7.9AI score0.00823EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/02 12:00 a.m.•3 views

CVE-2016-15007: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to...

9.8CVSS5.2AI score0.00823EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/02 12:00 a.m.•12 views

Centralized Salesforce Development Framework 注入漏洞

Centralized Salesforce Development Framework is a centralized development framework on the Force.com platform by Scott Covert, an individual developer. An injection vulnerability exists in the Centralized Salesforce Development Framework that stems from an incorrect manipulation of the parameter...

9.8CVSS6.4AI score0.00823EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/01/02 12:00 a.m.•13 views

PT-2023-10326 · Unknown · Centralized-Salesforce-Dev-Framework

Name of the Vulnerable Software and Affected Versions: Centralized-Salesforce-Dev-Framework affected versions not specified Description: A vulnerability was found in the Centralized-Salesforce-Dev-Framework, affecting the function SObjectService of the file src/classes/SObjectService.cls of the...

9.8CVSS6.3AI score0.00823EPSS
SaveExploits0References7
Veeam
Veeam
•added 2022/10/27 12:00 a.m.•24 views

Build Numbers and Versions of Veeam Backup for Salesforce

This KB article lists all versions of Veeam Backup for Salesforce and their respective build numbers. For more information on downloading the latest version of Veeam Backup for Salesforce , visit: Veeam Backup for Salesforce Current Version Download Page Version | Build Number | Release Date |...

5.9AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2022/10/27 12:00 a.m.•32 views

How to Create a Salesforce Connected App to Connect Veeam Backup for Salesforce to Salesforce.com

This article was designed to compliment the Veeam Backup for Salesforce User Guide Deployment Performing Initial Configuration Step 5. Create Connected App Purpose This article documents how to create a Connected App in Salesforce to integrate with Veeam Backup for Salesforce via Salesforce API. ...

6.9AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2022/10/27 12:00 a.m.•23 views

How to Reset Password for Veeam Backup for Salesforce

Purpose This article documents how to reset the password used to access Veeam Backup for Salesforce. Solution 1. Connect to the Veeam Backup for Salesforce machine via SSH 2. Run the script for changing the password: For Veeam Backup for Salesforce version 3: sudo /opt/vbsf/resetpassword.sh For...

7.1AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2022/10/27 12:00 a.m.•40 views

CANNOT_EXECUTE_FLOW_TRIGGER. You or your organization has exceeded the maximum limit for this feature.

Challenge When performing a restore involving multiple records, one or more records fail to be restored with the following Salesforce error message: CANNOTEXECUTEFLOWTRIGGER. You or your organization has exceeded the maximum limit for this feature. Error ID: XXX-XXX XXX organization has exceeded...

7.5AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2022/10/27 12:00 a.m.•32 views

How to Re-Initialize Veeam Backup for Salesforce Configuration Database Connection

Purpose This article documents how to change which account Veeam Backup for Salesforce uses to connect to its configuration database. Solution Scenario 1: Change Database Credentials When Existing Connection is Functioning This scenario assumes the current connection to the database is valid and...

6.6AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2022/10/27 12:00 a.m.•68 views

How to Manually Configure Nginx For Use by Veeam Backup for Salesforce

Purpose This article documents how to manually configure Nginx for use with Veeam Backup for Salesforce 3.1 and higher . Solution 1. Before making configuration changes, stop the Veeam Backup for Salesforce backend service: systemctl stop vbsf-backend.service Copy 2. Use Nginx template...

6.9AI score
SaveExploits0Affected Software1
Snyk
Snyk
•added 2022/09/28 8:12 a.m.•6 views

Malicious Package

Overview @sfdc-www/hgf-lwc-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Rapid7 Blog
Rapid7 Blog
•added 2022/08/08 6:00 p.m.•28 views

How One Engineer Upskilled Into a Salesforce Engineering Role at Rapid7

At Rapid7, we believe the growth and development of our people enables us to better serve customers who depend on us. When our Engineering team was searching for candidates to help with our Salesforce ecosystem, John Millar demonstrated many of our core values – most importantly, the appetite to...

7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2022/08/06 8:44 a.m.•44 views

Slack Resets Passwords After a Bug Exposed Hashed Passwords for Some Users

Slack said it took the step of resetting passwords for about 0.5% of its users after a flaw exposed salted password hashes when creating or revoking shared invitation links for workspaces. "When a user performed either of these actions, Slack transmitted a hashed version of their password to othe...

1AI score
SaveExploits0
Kitploit
Kitploit
•added 2022/08/04 12:30 p.m.•66 views

Cirrusgo - A Fast Tool To Scan SAAS, PAAS App Written In Go

A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest Help: cirrusg...

7.4AI score
SaveExploits0References1
HackRead
HackRead
•added 2022/06/24 11:49 p.m.•26 views

Prepare for Your Salesforce Certified OmniStudio-Developer Exam

By Owais Sultan The Salesforce OmniStudio Developer certification is specifically designed for those candidates who have skills, experience, and knowledge about… This is a post from HackRead.com Read the original post: Prepare for Your Salesforce Certified OmniStudio-Developer Exam...

2.4AI score
SaveExploits0
OSV
OSV
•added 2022/06/20 9:13 p.m.•12 views

MAL-2022-7204 Malicious code in wm-salesforce-lightning-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 735b5048c03ae40bcbc9cf73fafbc170efb003b51a37240dcd3b1ac3b48e0971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 9:13 p.m.•8 views

Malicious code in wm-salesforce-lightning-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 735b5048c03ae40bcbc9cf73fafbc170efb003b51a37240dcd3b1ac3b48e0971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:15 p.m.•11 views

Malicious code in sfdc-lightning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 596ee12aeaf872be8ce542ec207d55f9b2ff9817734d89a3016b5496d99be727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder