Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2024/12/12 4:13 a.m.•6 views

Malware in adminconsole

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/12/07 11:25 p.m.•20 views

MAL-2024-11234 Malicious code in adminconsole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88480db379ccb5378aada30388162f00d8033acb86b62e8d2e490533646c4a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/07 11:25 p.m.•18 views

Malicious code in adminconsole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88480db379ccb5378aada30388162f00d8033acb86b62e8d2e490533646c4a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Prion
Prion
•added 2014/03/06 11:55 a.m.•23 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...

6.8CVSS7.6AI score0.00698EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2014/03/06 11:00 a.m.•40 views

CVE-2014-0336

Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...

7.1AI score0.00698EPSS
SaveExploits1References1
CVE
CVE
•added 2014/03/06 11:00 a.m.•71 views

CVE-2014-0336

The CVE-2014-0336 issue affects Serena Dimensions CM 12.2 Build 7.199.0 web client (and possibly earlier) and is caused by a cross-site request forgery (CSRF) vulnerability in the web client. An attacker can craft a malicious URI to perform actions in an administrator’s session via the user_new_m...

6.8CVSS7.3AI score0.00698EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2014/03/06 12:00 a.m.•7 views

PT-2014-3568

Name of the Vulnerable Software and Affected Versions Serena Dimensions CM version 12.2 build 7.199.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that use the user new master parameter to the...

6.8CVSS0.00698EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/06 12:00 a.m.•11 views

CVE-2014-0336: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...

6.8CVSS5.9AI score0.00698EPSS
SaveExploits1References2
Rows per page
Query Builder