Lucene search
+L

8452 matches found

Kitploit
Kitploit
added 2024/04/27 4:55 p.m.58 views

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

7.2AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/04/26 1:46 p.m.38 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.22 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.22 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

9.8CVSS6.5AI score0.01592EPSS
SaveExploits0References21
RedHat Linux
RedHat Linux
added 2024/04/26 4:36 a.m.34 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.56 security update

Red Hat OpenShift Container Platform release 4.12.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

7.5CVSS7AI score0.91969EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/04/26 12:0 a.m.9 views

Microsoft Azure Command-Line Interface (CLI) Extensions Installed (Windows)

Binary data azurecliextensionswindetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/26 12:0 a.m.33 views

Microsoft Azure CLI Confcom Extension < 0.3.3 Privilege Escalation

An elevation of privilege vulnerability exists in Microsoft Azure CLI Confcom extension. An unauthenticated, remote attacker can exploit this, to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

9CVSS8.6AI score0.02197EPSS
SaveExploits0References3
Broadcom
Broadcom
added 2024/04/25 12:0 a.m.12 views

HTTPS configuration between Brocade SANnav Management Portal and Brocade SAN switches (no CVE)

A security researcher reported a lack of encryption in Brocade SANnav for management protocol HTTP. The researcher states: By default, the appliance can be installed with these options: To configure HTTP or HTTPS connections between SANnav Management Portal and SAN switches, select one of the...

7AI score
SaveExploits0
Veracode
Veracode
added 2024/04/22 6:12 a.m.24 views

Improper Authentication

jenkins-core is vulnerable to Improper Authentication. The vulnerability is due to the CLI using remote-based commands that stored encrypted user names in a cache particularly login command, enabling attacker with certain permissions to impersonate any Jenkins user...

8.8CVSS6.4AI score0.01214EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/22 12:0 a.m.10 views

PT-2024-25804 · Node.Js +1 · Node.Js +2

Name of the Vulnerable Software and Affected Versions: @hoppscotch/cli versions prior to 0.8.0 Description: The @hoppscotch/cli is a CLI to run Hoppscotch Test Scripts in CI environments. Prior to version 0.8.0, the @hoppscotch/js-sandbox package provides a Javascript sandbox that uses the Node.j...

8.3CVSS7.2AI score0.00611EPSS
SaveExploits0References11
CNVD
CNVD
added 2024/04/19 12:0 a.m.46 views

Fortinet FortiSandbox OS Command Injection Vulnerability (CNVD-2024-20429)

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiSandbox suffers from an operating system command injection...

6.7CVSS7.9AI score0.0063EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/04/18 6:27 p.m.29 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.40 packages and security update

Red Hat OpenShift Container Platform release 4.13.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

7.5CVSS7.2AI score0.01533EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/18 12:0 a.m.31 views

Juniper Junos OS Vulnerability (JSA75744)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75744 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low...

6.5CVSS6.5AI score0.00508EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
added 2024/04/17 6:21 p.m.7 views

@strata-foundation/governance-cli (>=3.11.0 <=3.11.2) potentially affected by CVE-2024-30253 via @solana/web3.js (=1.22.0)

@solana/web3.js NPM version =1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @strata-foundation/governance-cli =3.11.0, =3.11.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

7.5CVSS7AI score0.00593EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2024/04/17 6:21 p.m.10 views

@cardinal/namespaces-components (>=4.1.0 <=5.0.0), @frakters/fusion-pool (>=1.0.0 <=1.0.4) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.32.0)

@solana/web3.js NPM version =1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @cardinal/namespaces-components =4.1.0, =1.0.0, =0.0.29, =0.0.32 Source cves: CVE-2024-30253 Source advisory:...

7.5CVSS7AI score0.00593EPSS
SaveExploits0
OSV
OSV
added 2024/04/17 12:6 a.m.9 views

OSV-2024-264 UNKNOWN READ in cli_html_normalise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67953 Crash type: UNKNOWN READ Crash state: clihtmlnormalise htmlnormalisemap cliscanhtml...

7.2AI score
SaveExploits0References1
FreeBSD
FreeBSD
added 2024/04/17 12:0 a.m.88 views

jenkins -- Terrapin SSH vulnerability in Jenkins CLI client

Jenkins Security Advisory: Description Medium SECURITY-3386 / CVE-2023-48795 Terrapin SSH vulnerability in Jenkins CLI client...

5.9CVSS7.2AI score0.93305EPSS
SaveExploits4References1
Jenkins Security Advisories
Jenkins Security Advisories
added 2024/04/17 12:0 a.m.15 views

Terrapin SSH vulnerability in Jenkins CLI client

The CLI client jenkins-cli.jar in Jenkins 2.451 and earlier, LTS 2.440.2 and earlier bundles versions of the Apache MINA SSHD library that are susceptible to https://vulners.com/cve/CVE-2023-48795CVE-2023-48795 https://en.wikipedia.org/wiki/TerrapinattackTerrapin attack. This vulnerability allows...

5.9CVSS7AI score0.93305EPSS
SaveExploits4Affected Software1
OSV
OSV
added 2024/04/16 8:15 p.m.9 views

CVE-2024-30378

A Use After Free vulnerability in command processing of Juniper Networks Junos OS on MX Series allows a local, authenticated attacker to cause the broadband edge service manager daemon bbe-smgd to crash upon execution of specific CLI commands, creating a Denial of Service DoS condition. The...

6.9CVSS6AI score0.00179EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/16 8:3 p.m.121 views

CVE-2024-30378

This CVE describes a Use After Free in the MX Series bbe-smgd daemon of Junos OS during certain CLI commands, causing the broadband edge service manager to crash and restart (DoS). Affected software: Junos OS on MX Series with GRES and Subscriber Management enabled. Root cause: writing into an mg...

6.9CVSS7AI score0.00179EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
added 2024/04/16 1:26 p.m.54 views

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

New cybersecurity research has found that command-line interface CLI tools from Amazon Web Services AWS and Google Cloud can expose sensitive credentials in build logs, posing significant risks to organizations. The vulnerability has been codenamed LeakyCLI by cloud security firm Orca. "Some...

8.6CVSS7.1AI score0.21542EPSS
SaveExploits0
Veracode
Veracode
added 2024/04/16 11:32 a.m.22 views

Privilege Escalation

Amazon AWS Amplify CLI is vulnerable to Privilege Escalation. The vulnerability is due to the mishandling of role trust policies when the Authentication component is removed, leaving "Effect":"Allow" in place without conditions, thus exposing sts:AssumeRoleWithWebIdentity to potential misuse...

9.8CVSS6.8AI score0.01665EPSS
SaveExploits2References6Affected Software2
Rows per page
Query Builder