5 matches found
Astra Linux – Vulnerability in Zabbix
The implementation of atob in "Zabbix JS" allows for creating a string with arbitrary content and using it to access internal properties of objects...
MAL-2026-10669 Malicious code in dbconnectify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a41259fb0099de58bc669907fa6fb20331d794b13008df0afb42893808e4ab The package exposes a method queryDBConnect that base64-decodes a hardcoded URL HASHKEY → https://api.jsonbin.io/v3/b/6a609e63f5f4af5e29b05907,...
Zabbix security vulnerabilities
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix that stems from an improper implementation of the atob function, which may allow the creation ...
PT-2024-9177 · Zabbix +5 · Zabbix +5
Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.2 Description: The issue is related to the implementation of atob in "Zabbix JS", which allows creating a string with arbitrary content to access internal properties of objects. This can potentially lead to data...
CVE-2021-46888
An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting XSS vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function...