EUVD-2024-46243

Malicious code in bioql PyPI...

Misskey 输入验证错误漏洞

Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey versions 12.29.0 through prior to 2024.11.0-alpha.3, which stems from a lack of validation and allows an attacker to take control of a targ...

PT-2024-35387 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions prior to 2024.11.0-alpha.3 Description: The issue concerns missing validation in ApRequestService.signedGet, allowing an attacker to create fake user profiles that appear to be from a different instance. These profiles can be...