PT-2024-35692 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry version 24.11.0 Description: Sentry is an error tracking and performance monitoring platform. A specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integratio...

GHSA-49CC-XRJF-9QF7 SFTPGo allows administrators to restrict command execution from the EventManager

Impact One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in all software similar to SFTPGo and is generally unrestricted. However, any SFTPGo administrator with permission to run a...

SFTPGo allows administrators to restrict command execution from the EventManager

Impact One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in all software similar to SFTPGo and is generally unrestricted. However, any SFTPGo administrator with permission to run a...

CVE-2024-52309

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

CVE-2024-52309 SFTPGo allows administrators to restrict command execution from the EventManager

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

Progress Telerik UI for WinForms < 2024.4.1113 Unsafe Deserialization

The version of Progress Telerik UI for WinForms installed on the remote host is prior to 2024.4.1113. It is, therefore, affected by the following vulnerability: - In Progress Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113, a code execution attack is possible through an insecure...

CVE-2024-45194

CVE-2024-45194 affects Zimbra Collaboration (ZCS) 9.0–10.0, where the Webmail Modern UI stores XSS payloads injected by an admin via the Administration Panel. The vulnerability results in stored XSS executed in the victim’s browser when interacting with web interface elements. According to PT-202...

Telerik UI for WPF < 2024.4.1111 Unsafe Deserialization

The version of Progress Telerik UI for WPF installed on the remote Windows host is prior to 2024 Q4 2024.4.1111. It is, therefore, affected by the following: - In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure...

Searching Opencast may cause a denial of service

Impact First noticed in Opencast 13 and 14, Opencast's Elasticsearch integration may generate syntactically invalid Elasticsearch queries in relation to previously acceptable search queries. From Opencast version 11.4 and newer, Elasticsearch queries are retried a configurable number of times in...

Malicious code in ssc-ui-react-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9775050abb607b2118679f39c8bbf0f5ed85054e67ed46e97049ad4316af8c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10867 Malicious code in ssc-ui-react-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9775050abb607b2118679f39c8bbf0f5ed85054e67ed46e97049ad4316af8c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-ui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b4692057b25c7aae827dac87ce67a36581c27a8efdadf6083a3bdc9787be42d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10859 Malicious code in shopee-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b383eb61614247f3d87c14552e274da7f57ca4cd4061c90bececbef66f44ea3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b383eb61614247f3d87c14552e274da7f57ca4cd4061c90bececbef66f44ea3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10858 Malicious code in shopee-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993bcd6e55a784b07d25bde8752b92602b018036f8ba3de7fd78e85addad1634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993bcd6e55a784b07d25bde8752b92602b018036f8ba3de7fd78e85addad1634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filter-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c494b140465be2de8cadcbe5fcaf5f82d7980ca863eeb3cba9e6d9e0e762ebc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10853 Malicious code in filter-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c494b140465be2de8cadcbe5fcaf5f82d7980ca863eeb3cba9e6d9e0e762ebc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-26066

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entries when parsing certain XML...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...