cups: libppd: remote command injection via attacker controlled data in PPD file

A security vulnerability was found in OpenPrinting CUPS. The function ppdCreatePPDFromIPP2 in the libppd library is responsible for generating a PostScript Printer Description PPD file based on attributes retrieved from an Internet Printing Protocol IPP response. Essentially, it takes printer...

LangChain < 0.1.0 SSRF

The version of LangChain installed on the remote host is prior to 0.1.0. It is, therefore, affected by a SSRF vulnerability. An attacker in control of the contents of 'https://example.com' could place a malicious HTML file in there with links like 'https://example.completely.different/myfile.html...

MAL-2024-12176 Malicious code in valid-package (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccad71901dd807f11aedc2ca2f34c92319f90ccbf3fea758a765c78eb2ff6bdb Any computer that has this package install...

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...

Malicious code in auto-cancel-redundant-job (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f645ee53d82a1431bda0a23c718a688c58f23d0537c0da9ff38901d46a92c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-20849 · Superscan · Superscan

Name of the Vulnerable Software and Affected Versions: SuperScan version 4.1 Description: A buffer overflow issue was discovered in SuperScan, which occurs via the Hostname/IP parameter. This issue grants an attacker full control. Recommendations: For SuperScan version 4.1, patch immediately and...

CVE-2024-8036

ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker t...

CVE-2024-8036

CVE-2024-8036 relates to ABB product families (e.g., Relion protection relays) where the root cause is a data-forgery risk in the firmware/config update process: the vulnerability arises because the firmware or configuration file’s authenticity/integrity is not checked, enabling an attacker to ca...

CVE-2024-47972

Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource...

CVE-2024-47972

CVE-2024-47972 affects Solidigm DC Products firmware. Root cause: improper resource management in the firmware. Impact: could allow an attacker to potentially control the performance of the resource. CVSSv3.1 base score 4.0 (MEDIUM) with LOCAL attack vector, low availability impact. No explicit r...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing and other features from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from the fact that when configuring a profile on a virtual server with...

TOTOLINK A3600R 命令注入漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a command injection vulnerability that originates from improper handling of the telnetenabled parameter in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. An...

TOTOLINK A3700R Command Injection Vulnerability

TOTOLINK A3700R is a wireless router, launched by TOTOLINK China Gion Electronics, a Taiwan-based networking equipment manufacturer. The TOTOLINK A3700R suffers from a command injection vulnerability located in the /cgi-bin/cstecgi.cgi file, which stems from improper handling of the hostName...

Malicious code in discord-api-ts (npm)

This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...

ABB KNX Information Disclosure Vulnerability

ABB KNX is a smart home and building automation system from ABB Switzerland. An information disclosure vulnerability exists in ABB KNX that stems from the presence of an FDSK leakage issue, which would allow an attacker to gain control by accessing the local KNX bus system...

CVE-2024-29184 FreeScout Stored XSS to Privilege Escalation After CSP Bypass

FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting XSS vulnerability has been identified within the Signature Input Field of the FreeScout Application prior to version 1.8.128. Stored XSS occurs when user input is not properly sanitized and is stored on the...

GHSA-882J-4VJ5-7VMJ Cache Poisoning Vulnerability

Summary An attacker controlling the second variable of the translate function is able to perform a cache poisoning attack. They can change the outcome of translation requests made by subsequent users. Details The opt.id parameter allows the overwriting of the cache key. If an attacker sets the id...

GHSA-88WC-FCJ9-Q3R9 GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)

Summary A stored cross-site scripting XSS vulnerability exists that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the GWC Demos Page. Access to...

pgx SQL Injection via Protocol Message Size Overflow

Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. Patches The problem is resolved in v4.18....

Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts

The Mozilla Foundation Security Advisory describes this flaw as: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie respon...