46 matches found
cloud-audit
Project Introduction cloud-audit Cloud Security Audit Assistant is a tool for detecting the exploitation of leaked AK/SK from public cloud vendors. It periodically calls cloud platform APIs to audit logs and identifies suspected intrusions based on abnormal behavior, black features, and baselines...
CVE-2026-84440
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...
EUVD-2026-89192
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...
CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...
CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...
CVE-2026-84440
IBM Guardium Data Protection 12.2 is vulnerable to command injection within its SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can cause the SNMP alerter service to execute attacker-controlled data as operating system commands. Because th...
PT-2026-102801
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Command injection is possible within the SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can execute arbitrary operating system...
CVE-2026-84440: Improper Neutralization of Special Elements used in an OS Command
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...
...[ More ]
A proof of concept exploit for an authorization bypass vulnerability in Grafana version 13.1.3. The vulnerability allows an authenticated Editor to delete a protected alert notification receiver despite lacking the permission required to modify its protected destination fields. The receivers upda...
EUVD-2006-3450
Malware in sbrugna...
CVE-2024-41883
creationtimestamp| type| source ---|---|--- 2024-12-24 06:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsabtu5i2o 2024-12-24 07:42:44+00:00| seen| https://t.me/cvedetector/13566...
PT-2024-31704
Name of the Vulnerable Software and Affected Versions: Sentry versions prior to 24.9.0 Description: Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can delete user issue alert notifications for arbitrary users given a known alert ID. A patch w...
[SECURITY] Fedora 36 Update: zabbix-5.0.21-1.fc36
Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...
ASB-A-190404328
Bulletin has no description...
cepacbarueri.org.br Cross Site Scripting vulnerability OBB-1294157
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: IBM Alert Notification is affected by a security vulnerability when using Microsoft Internet Explorer (CVE-2018-1365)
Summary IBM Alert Notification is affected by one or more security vulnerabilities. When using Internet Explorer, Alert Notification can be loaded in to an iframe that is not part of the Alert Notification system. If you do not load Alert Notification directly, your session might be intercepted...
New Relic: Adding a new user discloses their full name in the "Users" section of NR Alerts notification channels page
The NR developers did a really good job at restricting me from finding out info about other user accounts through the NR Synthetics settings - so far I haven't found a way to bypass it yet 😉. There exists another way to obtain this information about other user accounts, and it has to do with the...
loopbacklabs.com XSS vulnerability
Vulnerable URL: http://www.loopbacklabs.com/news.jsp?n=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
pricerunner.co.uk XSS vulnerability
Vulnerable URL: http://www.pricerunner.co.uk/memberStatus?location=/%20%3E%3Csvg%20onload%3DalertOPENBUGBOUNTY;%20%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88072 VIP websi...
CA Multiple Products Alert Notification Server Buffer Overflow (CVE-2007-4620)
Computer Associates, or CA, develop and sell various software to enterprise users. Some CA products, such as Threat Manager, Protection Suites, and BrightStor ARCserve Backup, share a set of common components. One of these common component is Alert Notification Server. This component runs as a...