CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

CVE-2024-37130

CVE-2024-37130 (Dell OpenManage Server Administrator) is a Local Privilege Escalation via XSL Hijacking . Affected: Dell OpenManage Server Administrator versions 11.0.1.0 and prior . Root cause: an XSL hijack path enabling a local, low-privileged user to escalate to the admin user, potentially le...

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

Red Hat Keycloak Information Disclosure Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An information disclosure vulnerability exists in Red Hat Keycloak. An attacker could exploit the vulnerability to cause a data leak or system...

Malicious code in braintree-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 317e40dddb16cb1cb057d35c6fecd763482fcff6009f8fb06386f4b526cb3b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purina-parent-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f9b7d02952de94513c54d99f084210e51efcc626a3c0dbb8e1c517291f4393 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for OS Command Injection in Php

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @oran...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6816-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6816-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereferenc...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6820-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6820-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free...

LoLLMS Path Traversal vulnerability

A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 9.5.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse...

keycloak: Unguarded admin REST API endpoints allows low privilege users to use administrative functionalities

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise...

Malicious code in developer-integrity2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87499b0a5443852246ee964cc3d558e39a3f77a688484835c1e33524e1c6fce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npmnewtest-avisheknayal122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd48b8c1125a76b62b374d6e9b51b8a992a9ecd8248f793c7ead6428ecb96080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npmnewtest-avisheknayal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47030e6175929e7c1b3ce525879579330acf2aae6c6dcdc18c0e52956740b628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in demotestsample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81deaf8942b0c1f252d8e518570899524ba93df16ac9a9d325cb4a0dbafcf4f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/voluptatem-quos-blanditiis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ffad47dd5e4b83c52c28d23cac90196cb72fb455eb2a08e1fdbad8dc177657 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in command-injection-avi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54fd75c755589d5d22d320040508b52efe2fbce858fb0d335c391c2de86df60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/voluptates-illum-consequatur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d3af320e35bc7eda0120f2303317cec29bd15913b6bbb745b1a71c5f4044603 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...