SewKinect 代码问题漏洞

SewKinect is a paper pattern drawing software by the individual developer Cass Malloy. SewKinect suffers from a code issue vulnerability that stems from incorrect manipulation of the parameter bodyparts/pointcloud in the file/calculate, which could lead to a deserialization attack...

CVE-2022-29229

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: mailpit, authservice, trino, oras, dynamic-localpv-provisioner, ytt, litefs, rabbitmq-default-user-credential-updater, kwok, malcontent, jaeger-operator, k6, mage, protoc-gen-go-grpc, wave, cert-manager-cmctl, jitsucom-jitsu, grafana-mimir, task, oauth2-proxy,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: mailpit, authservice, trino, oras, dynamic-localpv-provisioner, ytt, litefs, rabbitmq-default-user-credential-updater, kwok, malcontent, jaeger-operator, k6, mage, protoc-gen-go-grpc, wave, cert-manager-cmctl, jitsucom-jitsu, grafana-mimir, task, oauth2-proxy,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, yace-fips, hivemind, nri-couchbase, aws-flb-cloudwatch-fips, dex, velero, tkn-fips, aws-signer-notation-plugin-fips, conftest, gke-gcloud-auth-plugin, kaniko-fips, neuvector-dbgen, prometheus-adapter, crossplane, flux-image-reflector-controller,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: trino, oras, ytt, temporal-ui-server, litefs, php-fpmexporter, cosign, fluent-bit-plugin-loki, victoriametrics-operator, k8ssandra-operator, kwok, k6, mage, protoc-gen-go-grpc, wave, cert-manager-cmctl, oauth2-proxy, controller-gen, extism, aws-flb-firehose, mkcert,...

CVE-2024-8395 FlyCASS Cockpit Access Security System (CASS) SQL Injection

FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside attackers with no authentication...

CVE-2024-8395 FlyCASS Cockpit Access Security System (CASS) SQL Injection

FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside attackers with no authentication...

SQL Injection Attack on Airport Security

Interesting vulnerability: …a special lane at airport security called Known Crewmember KCM. KCM is a TSA program that allows pilots and flight attendants to bypass security screening, even when flying on domestic personal trips. The KCM process is fairly simple: the employee uses the dedicated la...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages: cass-config-builder...

CVE-2024-22871 vulnerabilities

Vulnerabilities for packages: cass-config-builder...

CVE-2024-22871 vulnerabilities

Vulnerabilities for packages: cass-config-builder...

cass-abogados.com Cross Site Scripting vulnerability OBB-2964423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Missing Cryptographic Step in cassproject

Impact CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, which uses a method that expects e2e...

GHSA-7QCX-4P32-QCMX Missing Cryptographic Step in cassproject

Impact CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, which uses a method that expects e2e...

CVE-2022-29229

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

Authorization

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

CVE-2022-29229 Missing Cryptographic Step in cassproject

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

CVE-2022-29229

CaSS Library (npm:cassproject) has a missing cryptographic step when storing cryptographic keys, which can allow a server administrator to access an account’s keys. This affects CaSS servers using standalone username/password authentication, where credentials are assumed to be end-to-end secure. ...

CVE-2022-29229 Missing Cryptographic Step in cassproject

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...