601 matches found
Exploit for Code Injection in Combodo Itop
iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debu...
Exploit for Authentication Bypass by Spoofing in Zabbix
CVE-2022-23131poc-exp-zabbix CVE-2022-23131 Vulnerability Ba...
Exploit for Authentication Bypass by Spoofing in Zabbix
CVE-2022-23131poc-exp-zabbix CVE-2022-23131 Vulnerability Ba...
Malicious Package
Overview selenium-applitools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by o...
MAL-2022-5998 Malicious code in selenium-applitools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f3935fd94ed2b7cc1fab768dbb6e1a0bce1f8c28bf1c675df20ca6fdb8ff9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in selenium-applitools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f3935fd94ed2b7cc1fab768dbb6e1a0bce1f8c28bf1c675df20ca6fdb8ff9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Selenium Grid Cross-Site Request Forgery (CVE-2022-28108)
A cross-site request forgery vulnerability exists in Selenium Grid. Successful exploitation of this vulnerability could result in code execution on the affected system...
Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints. This allows attackers to perform the following actions: - Restart the Selenium Grid hub. - Delete or replace the plugin configuration. - Start, stop, or restart Selenium configurations on specific nodes. Through...
GHSA-RP4X-XPGF-4XV7 Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints. This allows attackers to perform the following actions: - Restart the Selenium Grid hub. - Delete or replace the plugin configuration. - Start, stop, or restart Selenium configurations on specific nodes. Through...
Selenium Server Cross-Site Request Forgery Vulnerability
Selenium Grid is an intelligent proxy server for the Selenium community. It can easily run tests in parallel on multiple machines.A cross-site request spoofing vulnerability exists in versions prior to Selenium Server 4, which can be exploited by attackers to spoof malicious requests to trick...
Selenium Server (Grid) CSRF
Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
GHSA-H2RR-M97P-6JQ9 Selenium Server (Grid) CSRF
Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
CVE-2022-28108
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
CVE-2022-28108
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
Cross site request forgery (csrf)
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
PYSEC-2022-43167
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
PYSEC-2022-43167
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
CVE-2022-28108
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
CVE-2022-28108
CVE-2022-28108: Selenium Server (Grid) CSRF in versions before 4.0.0-alpha-7 arises because the server accepts non-JSON content types (e.g., text/plain, application/x-www-form-urlencoded, multipart/form-data) for requests. The vulnerability can be triggered via crafted requests (e.g., to /wd/hub/...