5282 matches found
CVE-2023-35147
CVE-2023-35147 affects the Jenkins AWS CodeCommit Trigger Plugin, v3.0.12 and earlier. The issue arises because the HTTP endpoint does not restrict the AWS SQS queue name path parameter, enabling attackers with Item/Read permission to obtain contents of arbitrary files on the Jenkins controller f...
CVE-2023-35147
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system...
CVE-2023-35147
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system...
Building a seamless and secure cloud environment with AWS
Elevate cloud capabilities and stay ahead in today's dynamic cloud landscape...
Veeam Agent for Microsoft Windows Built-In Case Creation fails with "The request was aborted: Could not create SSL/TLS secure channel"
Article Applicability This article is regarding an issue that impacts Veeam Agent for Microsoft Windows build 5.0.0.4301 or older, and was fixed in build 5.0.1.4584. Challenge When attempting to open a support case using the Technical Support button within the Veeam Agent for Microsoft Windows...
@evidence-dev/components (>=3.0.0-usql.26, <=3.0.0-usql.30), @evidence-dev/db-orchestrator (>=0.1.9, <=3.0.0-usql.11) +11 more potentially affected by CVE-2023-34232 via snowflake-sdk (>=1.1.4, <=1.6.13)
snowflake-sdk NPM version =1.1.4, =3.0.0-usql.26, =0.1.9, =0.0.0-24593668, =0.1.15, =1.1.10, =3.0.1, =0.0.1, =0.2.12, =0.1.9, =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2023-34232 Source advisory: OSV:GHSA-H53W-7QW7-VH5C...
Exploit for SQL Injection in Progress Moveit_Cloud
CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfe...
Important Photon OS Security Update - PHSA-2023-4.0-0406
Updates of 'linux-rt', 'openssl', 'linux-aws', 'linux-secure' packages of Photon OS have been released...
CVE-2023-32751
Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript 1. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it i...
Cross site scripting
Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript 1. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it i...
USN-6149-1: Linux kernel vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...
CVE-2023-32751
CVE-2023-32751 affects Pydio Cells 4.1.2 and earlier. The vulnerability arises from presigned URL signing using secrets hardcoded in the JavaScript of the web app, enabling failure to constrain access to file downloads. An attacker can upload an HTML file and modify the download URL to serve the ...
CVE-2023-32751
Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript 1. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it i...
CVE-2023-32751
Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript 1. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it i...
The Big IAM Challenge: Test Your Cloud Security Skills
Put yourself to the test with our unique CTF challenge and boost your AWS IAM knowledge. Do you have what it takes to win The Big IAM Challenge?...
Ubuntu: Security Advisory (USN-6132-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Command Shell, Bind SSM (via AWS API)
Creates an interactive shell using AWS SSM Module Options msf use payload/generic/shellbindawsssm msf payloadshellbindawsssm show actions ...actions... msf payloadshellbindawsssm set ACTION msf payloadshellbindawsssm show options ...show and set options... msf payloadshellbindawsssm run This modu...
Accelerate compliance with the Landing Zone Accelerator on AWS
Increasing complex compliance requirements is placing a heavy burden on security leaders. To better support organizations' pursuit of FedRAMP High Compliance, AWS launched the Landing Zone Accelerator on AWS. We conducted a thorough evaluation of the solution and shared our findings in the new LZ...
Signature Validation Bypass
djangoses is vulnerable to Signature Validation Bypass. The vulnerability exists in utils.py due to a lack of validation in AWS certificates because an attacker can specify arbitrary public certificates...