CVE-2024-41811 ipl/web susceptible to Cross-Site Request Forgery (CSRF)

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

Malicious code in linkinbio-web-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2620 Malicious code in linkinbio-web-components (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerabilities of the components dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi, and seama.cgi of the D-LINK GO-RT-AC750 router’s microprogramming system allow a attacker to perform XSS attacks.

The vulnerability of the dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi, and seama.cgi components of the D-LINK GO-RT-AC750 router software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to carry ou...

The vulnerabilities of the components org.xwiki.platform:xwiki-platform-web and org.xwiki.platform:xwiki-platform-web-templates of the XWiki platform for creating collaborative web applications. XWiki allows attackers to execute arbitrary code.

The vulnerabilities of the components org.xwiki.platform:xwiki-platform-web and org.xwiki.platform:xwiki-platform-web-templates of the XWiki Platform allow attackers to execute arbitrary code. The XWiki Platform is vulnerable due to a lack of mechanisms for escaping output data. Exploiting these...

The vulnerability of the web components of Ivanti Connect Secure and Ivanti Policy Secure control tools allows a perpetrator to…

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure web components related to access control vulnerabilities. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the level of an administrator...

CVE-2024-21888

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...

The vulnerability of the web components of Ivanti Connect Secure and Ivanti Policy Secure control tools allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure web components related to authentication procedures’ flaws. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted requests...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

Command injection

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

VulnCheck KEV: CVE-2024-21887

Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This...

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This...

MAL-2023-8508 Malicious code in zoo-web-components-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zoo-web-components-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Updates for Skype for Business Server 2019 (KB4470124)

None None...

Malicious Package

Overview cvent-web-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2022-2291 Malicious code in cvent-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb3c6feabc769a5b68e6c52a29ed619c645b3dbb7c78c9b6313affab4d47f44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cvent-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb3c6feabc769a5b68e6c52a29ed619c645b3dbb7c78c9b6313affab4d47f44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...