995 matches found
UBUNTU-CVE-2024-28233
JupyterHub is an open source multi-user server for Jupyter notebooks. By tricking a user into visiting a malicious subdomain, the attacker can achieve an XSS directly affecting the former's session. More precisely, in the context of JupyterHub, this XSS could achieve full access to JupyterHub API...
GHSA-3Q6G-QMPX-RQW4 Whoogle Search Server-Side Request Forgery vulnerability
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...
Directory traversal
The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 free version and 8.3.4 Pro version via the target parameter in the mkfilefoldermanageractioncallbackshortcode function. This makes it possible for...
CVE-2024-24767
CVE-2024-24767 concerns CasaOS-UserService where versions before 0.4.7 fail to defend against password brute‑force attacks, allowing attacker with network access to achieve superuser‑level access to the server. The issue is due to inadequate protection over login attempts in CasaOS web app. A pat...
GHSA-C69X-5XMW-V44X CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
Summary Here it is observed that the CasaOS doesn't defend against password brute force attacks, which leads to having full access to the server. Details The web application lacks control over the login attempts i.e. why attacker can use a password brute force attack to find and get full access...
BIT-TYPO3-2020-15099
In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code HMAC-SHA1 - either by using a different existing vulnerability or in case t...
CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
Here it is observed that the CasaOS doesn't defend against password brute force attacks, which leads to having full access to the server...
The vulnerability of the getParams method in Inductive Automation Ignition software allows a perpetrator to execute arbitrary code.
The vulnerability of the getParams method in Inductive Automation Ignition software lies in the ability to exploit or modify arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to the server...
UBUNTU-CVE-2023-52434
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...
PT-2024-18199 · Unknown · Torrentpier
Name of the Vulnerable Software and Affected Versions: Torrentpier version 2.4.1 Description: The issue allows executing arbitrary commands on the server due to the application being vulnerable to insecure deserialization. Recommendations: For Torrentpier version 2.4.1, as a temporary workaround,...
CVE-2024-1482 Improper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUBTOKEN. To exploit this vulnerability, an attacker would need access...
Apktool Security Vulnerability
Apktool is a tool to reverse engineer Android APK files. A security vulnerability exists in Apktool versions prior to 2.9.3. An attacker can exploit the vulnerability to read arbitrary files on the server...
PYSEC-2024-127
Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that can be enabled by setting the SSRFPROTECTIONENABLED environment variable can be bypassed to access...
PT-2023-31475 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS 2023 Description: The issue is related to a file upload vulnerability in the 3/E bak5.1/upload/index.php file, which allows attackers to exploit this loophole and gain server privileges, enabling them to execute arbitrary code. The...
PT-2023-9274 · Superagi · Superagi
Name of the Vulnerable Software and Affected Versions: SuperAGI versions all Description: The issue is related to the incorrect management of code generation in the eval function of the SuperAGI framework, which can be exploited by a remote attacker to execute arbitrary code and gain full control...
Mlflow Security Vulnerabilities
Mlflow is an open source platform for the machine learning lifecycle. A security vulnerability exists in Mlflow versions prior to 2.9.2 that stems from allowing an attacker to read sensitive files on the server...
PT-2023-32749 · Repox · Repox
Name of the Vulnerable Software and Affected Versions: Repox affected versions not specified Description: An XEE vulnerability has been found in Repox, allowing a remote attacker to interfere with the application's XML data processing in the fileupload function. This results in interaction betwee...
WordPress Plugin Welcart e-Commerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2023-7332 · Zyxel · Zyxel Nas326 +1
Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 version V5.21AAZF.14C0 Zyxel NAS542 version V5.21ABAG.11C0 Description: A command injection issue exists in the web server of the Zyxel NAS326 and NAS542 firmware due to the lack of neutralization of special elements used in...
