CVE-2021-47903 LiteSpeed Web Server Enterprise 5.4.11 - Command Injection

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...

CVE-2023-29921

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface...

EUVD-2023-1357

Malicious code in bioql PyPI...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) involves improper authorization, allowing a malicious individual to disclose protected information.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by downloading configuration files or full backup files...

GHSA-MPVF-6H9G-2HQ2 PowerJob Incorrect Access Control vulnerability

PowerJob v4.3.6 is vulnerable to Incorrect Access Control via the create app interface...

CVE-2023-29921

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface...

CVE-2023-29921

PowerJob V4.3.1 is affected by Incorrect Access Control via the create app interface, enabling an attacker to create apps without permission. The issue is described in multiple sources (e.g., Red Hat, GHSA/OSV, Veracode) as improper access control. Veracode notes the vulnerable flow through the /...

PT-2023-22478 · Powerjob · Powerjob

Name of the Vulnerable Software and Affected Versions: PowerJob version 4.3.1 Description: The issue is related to Incorrect Access Control via the create app interface. Recommendations: For PowerJob version 4.3.1, consider restricting access to the create app interface until a fix is available. ...

CVE-2023-29921

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface...

Google and Apple Reveal How Covid-19 Alert Apps Might Look

As contact tracing plans firm up, the tech giants are sharing new details for their framework—and a potential app interface...