EUVD-2017-9552

Malware in sbrugna...

Malicious code in chat-api2 (npm)

The package chat-api2 was found to contain malicious code...

CVE-2017-18436

cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...

Fedora: Security Advisory for jaxb-api2 (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2023-325 Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31358

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

PT-2022-20714 · Proxmox · Proxmox Virtual Environment

Name of the Vulnerable Software and Affected Versions: Proxmox Virtual Environment versions prior to 7.2-3 Description: A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under the path "/api2/html/". This enables...

CVE-2017-18440

cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...

Code injection

cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...

Code injection

cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...

CVE-2017-18440

CVE-2017-18440 affects cPanel prior to 64.0.21. The vulnerability allows demo users to execute traceroute via the api2 interface (SEC-244). Impact is limited to information collection via traceroute; no broader impact is stated. Remediation is to upgrade to cPanel 64.0.21 or later, or apply provi...

CVE-2017-18436

cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...