PT-2024-28843 · Unknown · Spark Mall B2C Mall

Name of the Vulnerable Software and Affected Versions: Spark Mall B2C Mall versions 1.1.6 and earlier Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the controller/common.php component. Recommendations: For Spark Mall B2C Mall versions 1.1.6 and...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...

Check Point Response to CVE-2024-6387 - OpenSSH Library RCE

Cause A security regression CVE-2006-5051 was discovered in the OpenSSH server sshd version 8.5p1. There is a race condition, which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time...

CVE-2023-46674

A flaw was found in elasticsearch-hadoop that allowed the unsafe deserialization of Java objects from Hadoop or spark configuration properties that could have been modified by authenticated users. Unsafe deserialization may impact integrity by allowing an attacker to modify unexpected objects or...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Nmap script to check vulnerability CVE-2024-249...

GHSA-973X-65J7-XCF4 vulnerabilities

Vulnerabilities for packages: spark, druid, trino, apache-nifi...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

Exploit for CVE-2024-24919 Description This Python script...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919...

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several...

CVE-2024-36114 vulnerabilities

Vulnerabilities for packages: spark, druid, trino, apache-nifi...

Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

Check Point is warning of a zero-day vulnerability in its Network Security gateway products that threat actors have exploited in the wild. Tracked as CVE-2024-24919 CVSS score: 8.6, the issue impacts CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, and...

The vulnerability of Check Point Quantum Gateway and Check Point Spark, part of the comprehensive security system CloudGuard Network, stems from the lack of protection for operational data. This allows attackers to gain access to the protected information.

The vulnerability of Check Point Quantum Gateway and Check Point Spark, part of the comprehensive security system CloudGuard Network, is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to gain access to protected information from...

TotalCloud Insights: Uncovering the Hidden Dangers in Google Cloud Dataproc

Summary The Apache Hadoop Distributed File System HDFS can be vulnerable to data compromise when a Compute Engine cluster is in a public-facing virtual private cloud VPC or shares the VPC with other Compute Engine instances. Google Cloud Platform GCP provides a default VPC called default. This VP...

VulnCheck KEV: CVE-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: helm-fips, pombump, mods, frp, govulncheck, policy-controller, prometheus-mongodb-exporter, libnvidia-container, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, newrelic-nri-statsd, prometheus-redis-exporter, ctop, thanos, addon-resizer-fips, gitleaks...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: spark-operator, aws-efs-csi-driver, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, ip-masq-agent, argocd-image-updater, nodetaint, kubernetes, kubernetes-dns-node-cache...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: spark-operator, aws-efs-csi-driver, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, ip-masq-agent, argocd-image-updater, nodetaint, kubernetes, kubernetes-dns-node-cache...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudfront, crossplane-provider-aws-eks, kine, rootlesskit, buf, go-licenses, govulncheck, crossplane-provider-aws-cloudformation, grpcurl, gomplate, grafana-agent-operator, spark-operator, falcosidekick,...