CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

CVE-2021-21627

CVE-2021-21627 is a CSRF vulnerability in Jenkins Libvirt Agents Plugin (versions

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

Jenkins Libvirt Agents 跨站请求伪造漏洞

Jenkins Libvirt Agents is Jenkins open source an application plugin . The plug-in is used to add libvirt hypervisor agent support. A cross-site request forgery vulnerability exists in Jenkins Libvirt Agents Plugin 1.9.0 and earlier versions. An attacker could exploit this vulnerability to stop th...

PT-2021-14670 · Jenkins · Jenkins Libvirt Agents Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Libvirt Agents Plugin versions 1.9.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to stop hypervisor domains. This issue arises because the plugin does not require POST requests for a form...

Managed Veeam Backup Agents are offline after Veeam Service Provider Console upgrade

Challenge After upgrading Veeam Service Provider Console, all Veeam Management Agents are listed as offline. Cause This may be caused by an incorrect security certificate configuration, which leads to the disconnection of the management agent on the Veeam Cloud Connect server after the upgrade. S...

NewStart CGSL CORE 5.04 / MAIN 5.04 : fence-agents Vulnerability (NS-SA-2021-0028)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has fence-agents packages installed that are affected by a vulnerability: - In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send...

CVE-2020-28050

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...

Authentication flaw

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...

CVE-2020-28050

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...

ZOHO ManageEngine Desktop Central 安全漏洞

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management.A security...

CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

Design/Logic Flaw

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

The mystery of the Silver Sparrow Mac malware

Cyber security company Red Canary published findings last week about a new piece of Mac malware called Silver Sparrow. This malware is notable in being one of the first to include native code for Apples new M1 chips, but what is unknown about this malware is actually more interesting than what is...

Philip Ulrich GramAddict Code Injection Vulnerability

Philip Ulrich GramAddict is an application from Canary Philip Ulrich USA. It provides for building network monitoring solutions. A security vulnerability exists in GramAddict that could allow remote attackers to execute arbitrary code through the use of the UIAutomator2 and ATX agents...

fence-agents bug fix and enhancement update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Bug Fixes and Enhancements: fenceaws: add support for IMDSv2 BZ1905595...