Malicious code in progressabr2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 964fc90d7cf8060f3563f1f33f83b68e2ecacbfb434f9e5507a7ecfe53dd08db Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in python-binancce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 25a34327f7e876dce537a24a4ce853da733326eb04ec4dbf128361269f830d2c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2022-3255 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform. View any information that the user is able to view. Modify...

Insecure Cryptography

node-forge improperly verifies cryptographic signatures. The vulnerability exists through improper verification of DigestInfo in the rsa.js file allowing to validate the signature in an invalid structure which allows an attacker to perform unwanted actions...

WordPress 插件 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. The Push Notifications plugin for WordPress...

CVE-2021-25443

A use after free vulnerability in conngadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker...

OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. OpenShift suffers from a security vulnerability that can be exploited by an attacker to access a running container that loads kubernet...

Mautic cross-site scripting vulnerability (CNVD-2021-08892)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in versions prior to Mautic 3.2.4, which can be exploited by attackers to perform actions on targeted users. These actio...

The Missing LNK — Correlating User Search LNK files

Forensic investigators use LNK shortcut files to recover metadata about recently accessed files, including files deleted after the time of access. In a recent investigation, FireEye Mandiant encountered LNK files that indicated an attacker accessed files included in Windows Explorer search result...

WordPress Simple Fields Plugin < 1.2 CSRF Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Input validation

Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log...

PT-2017-12429 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center affected versions not specified Description: A lack of cross-site request forgery CSRF protection in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted...

The use of SSRF vulnerability to take over the APP server-the vulnerabilities and early warning-the black bar safety net

SSRF attack refers to an attacker forcibly control the presence of vulnerabilities of the server,thereby sending a malicious request to a third party server or internal resources. And then use the vulnerability to launch specific attacks,such as cross-site port attacks,service enumeration, and a...

SO Planning Cross-Site Scripting Vulnerability

SO Planning is a free and open source set of online project production and management tools. A cross-site scripting vulnerability exists in SO Planning. The program fails to adequately filter user-submitted input. When a user navigates to the affected site, their browser will execute arbitrary...

IBM WebSphere Cross-Site Request Forgery Vulnerability

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A cross-site request forgery vulnerability exists in IBM WebSphere Portal that allows a remote attacker to construct a malicious URI,...