226 matches found
CVE-2024-25545
An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...
CVE-2024-25545
An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...
CVE-2024-25545
An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...
CVE-2024-25545: Improperly Implemented Security Check for Standard
An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...
CVE-2024-25545
An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code by providing a crafted script to the nwjs framework component. This vulnerability is associated with CWE-358 (Improperly Implemented Security Check for Standard). As a temporary workaround, users are advis...
Weave Desktop 安全漏洞
Weave Desktop is a development tool for creating and managing microservices from Weave. A security vulnerability exists in Weave Desktop version v.7.78.10, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the nwjs framework component...
PT-2024-20997 · Weave · Weave Desktop
Name of the Vulnerable Software and Affected Versions: Weave Weave Desktop version 7.78.10 Description: An issue in Weave Weave Desktop allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component. Recommendations: For Weave Weave Desktop version 7.78.10,...
CVE-2024-25545
An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...
emlog pro /content/templates/arbitrary file upload vulnerability
emlog is a lightweight blog and CMS builder based on PHP and MySQL. An arbitrary file upload vulnerability exists in emlog pro /content/templates/, which can be exploited by a remote attacker to submit a special request that can be used to upload a malicious file to execute arbitrary code in the...
CVE-2023-34236
Weave GitOps Terraform Controller aka Weave TF-controller is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This...
Weave GitOps Terraform Controller Information Disclosure Vulnerability
Impact A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This vulnerability stems from Weave GitOps Terraform Runners tf-runner, where sensitive data is inadvertently printed - potentially...
GHSA-6HVV-J432-23CV Weave GitOps Terraform Controller Information Disclosure Vulnerability
Impact A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This vulnerability stems from Weave GitOps Terraform Runners tf-runner, where sensitive data is inadvertently printed - potentially...
CVE-2023-34236 Information Disclosure Vulnerability in Weave GitOps Terraform Controller
Weave GitOps Terraform Controller aka Weave TF-controller is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This...
CVE-2023-34236 Information Disclosure Vulnerability in Weave GitOps Terraform Controller
Weave GitOps Terraform Controller aka Weave TF-controller is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This...
CVE-2023-34236
The CVE-2023-34236 disclosure affects Weave GitOps Terraform Controller (tf-controller) via the tf-runner component. The vulnerability arises when tfexec.ShowPlan, tfexec.ShowPlanRaw, or tfexec.Output print sensitive data to standard output/error because Stdout/Stderr are bound to os.Stdout/os.St...
CVE-2023-34236 Information Disclosure Vulnerability in Weave GitOps Terraform Controller
Weave GitOps Terraform Controller aka Weave TF-controller is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This...
Weave GitOps 信息泄露漏洞
Weaveworks Weave GitOps is a simple open source developer platform from Weaveworks UK. An information disclosure vulnerability exists in Weave GitOps Terraform Controller Weave TF-controller v0.14.3 and earlier, v0.15.0-rc.4 and earlier, which originates in Weave GitOps Terraform Runners tf-...
PT-2023-24760 · Weave · Weave Gitops Terraform Controller
Name of the Vulnerable Software and Affected Versions: Weave GitOps Terraform Controller versions prior to v0.14.4 Weave GitOps Terraform Controller versions prior to v0.15.0-rc.5 Description: A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an...
CVE-2023-34236: Exposure of Sensitive Information to an Unauthorized Actor
Weave GitOps Terraform Controller aka Weave TF-controller is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This...
TeamTNT's Silentbob Botnet Infecting 196 Hosts in Cloud Attack Campaign
As many as 196 hosts have been infected as part of an aggressive cloud campaign mounted by the TeamTNT group called Silentbob. "The botnet run by TeamTNT has set its sights on Docker and Kubernetes environments, Redis servers, Postgres databases, Hadoop clusters, Tomcat and Nginx servers, Weave...