35 matches found
CVE-2026-85499 Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy
Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests throug...
CVE-2026-85499
Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests throug...
CVE-2026-85499 Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy
Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests throug...
CVE-2026-85499
An Improper Authorization vulnerability exists in Apache SkyWalking BanyanDB (versions 0.11.0 before 0.11.1 ). The issue is located in the Canopy component, where the system fails to enforce readonly-role restrictions on the /monitoring/* proxy. Under a non-default configuration, a user with a re...
PT-2026-110541
Name of the Vulnerable Software and Affected Versions Apache SkyWalking BanyanDB versions 0.11.0 Description An improper authorization issue exists in the Canopy component. Under a non-default configuration, a user assigned a readonly role can bypass restrictions and send non-read requests throug...
EUVD-2021-21462
Malware in sbrugna...
EUVD-2018-20640
Malware in sbrugna...
CVE-2021-34815
CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...
build-harness (0.2.1), c4v-py (>=0.1.0.dev2021118, <=0.1.0.dev202201291921) +34 more potentially affected by CVE-2023-5752 via pip (21.3.1)
pip PYPI version 21.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - build-harness 0.2.1 - c4v-py =0.1.0.dev2021118, =0.0.2a0, =0.9.2, =1.26.1, =0.5.0, =4.0.0, =22.16.0, =0.1.9, =0.2.12, =0.1.0, =0.0.57, =0.0.59 -...
asyncio-gevent (0.2.1), bgpfu (>=0.2.0, <=0.3.0) +82 more potentially affected by CVE-2023-41419 via gevent (21.12.0)
gevent PYPI version 21.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - asyncio-gevent 0.2.1 - bgpfu =0.2.0, =1.0.0, =0.0.1, =0.0.2a0, =0.1.10, =0.7.2, =0.1.0, =0.5.0, =0.0.1, =0.0.10, =3.23.1, =3.24.1 and more Source...
asyncio-gevent (0.2.1), bgpfu (>=0.2.0, <=0.3.0) +82 more potentially affected by CVE-2023-41419 via gevent (21.12.0)
gevent PYPI version 21.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - asyncio-gevent 0.2.1 - bgpfu =0.2.0, =1.0.0, =0.0.1, =0.0.2a0, =0.1.10, =0.7.2, =0.1.0, =0.5.0, =0.0.1, =0.0.10, =3.23.1, =3.24.1 and more Source...
Malicious Package
Overview canopy-common-fo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
MAL-2023-157 Malicious code in canopy-common-fo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd983235acbe60ea7ab43744193a666e61c5bc35a50e7332217b14925f9d557c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in canopy-common-fo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd983235acbe60ea7ab43744193a666e61c5bc35a50e7332217b14925f9d557c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in canopy-common-fo
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Iran's MuddyWater Hacker Group Using New Malware in Worldwide Cyber Attacks
Cybersecurity agencies from the U.K. and the U.S. have laid bare a new malware used by the Iranian government-sponsored advanced persistent threat APT group in attacks targeting government and commercial networks worldwide. "MuddyWater actors are positioned both to provide stolen data and accesse...
Canopy Parental Control App Wide Open to Unpatched XSS Bugs
Canopy, a parental control app that offers a range of features meant to protect kids online via content inspection, is vulnerable to a variety of cross-site scripting XSS attacks, according to researchers. The attacks could range from a sneaky kid disabling the monitoring to a much more serious...
Canopy Cross-Site Scripting Vulnerability
CheckSec Canopy is a team collaboration system for cyber security from CheckSec UK. The system includes features such as document management, report generation and management, and schedule management. A cross-site scripting vulnerability exists in versions of CheckSec Canopy prior to 3.5.2, which...
