@incomplete.systems/next.apollo (>=0.1.1, <=0.1.7), @smrtsrc/react-checkbox (>=0.0.58, <=0.0.59) +7 more potentially affected by CVE-2024-23841 via @apollo/experimental-nextjs-app-support (>=0.1.0, <=0.6.0)

@apollo/experimental-nextjs-app-support NPM version =0.1.0, =0.1.1, =0.0.58, =0.1.74, =0.1.117, =0.1.45, =0.0.45, =0.0.114, =1.0.0, =0.0.4, =0.0.5 Source cves: CVE-2024-23841 Source advisory: OSV:GHSA-RV8P-RR2H-FGPG...

@enalmada/next-gql (>=0.0.4, <=0.1.3) potentially affected by CVE-2024-24556 via @urql/next (>=1.0.0, <=1.1.0)

@urql/next NPM version =1.0.0, =0.0.4, =0.1.3 Source cves: CVE-2024-24556 Source advisory: OSV:GHSA-QHJF-HM5J-335W...

TCP Resets from Client and Server aka TCP-RST-FROM-Client

Diving into the Enigma of TCP Resets Executed by Client and Server The Base Communication Protocol BCP, understoond as the Transmission Control Protocol TCP" equivalent, plays a key role in the protocol unit of the internet. Its primary task entails laying a groundwork for communication between t...

Internet Bug Bounty: CVE-2024-21733 Apache Tomcat HTTP Request Smuggling (Client- Side Desync) (CWE: 444)

SECURITY CVE-2024-21733 Apache Tomcat - Information Disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0-M11 to 9.0.43 Apache Tomcat 8.5.7 to 8.5.63 Description: Incomplete POST requests triggered an error response that could contain data fr...

Are You Ready for PCI DSS 4.0?

The Payment Card Industry Data Security Standard PCI DSS is the global benchmark for ensuring companies that handle credit card information maintain a secure environment. It provides a framework to help organizations protect sensitive cardholder data from theft and secure payment card systems. In...

Is it possible to customize the Virtual Channel function on Citrix Virtual Apps and Desktops ?

The Citrix Virtual Channel software development kit SDK supports writing server-side applications and client-side drivers for more virtual channels using the ICA protocol...

CVE-2023-48255

The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log...

CVE-2023-48255

The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log...

CVE-2023-48254

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request...

CVE-2023-48254

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request...

Code injection

The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log...

CVE-2023-48255

The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log...

CVE-2023-48255

The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log...

CVE-2023-48254

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request...

CVE-2023-48254

The CVE-2023-48254 entry describes a vulnerability where a remote attacker can inject and execute arbitrary client-side script inside a victim session via a crafted URL or HTTP request. Multiple connected sources corroborate this client-side script execution risk, with the core issue centered on ...

CVE-2023-48248

The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file...

CVE-2023-48244

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request...

CVE-2023-48244

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request...

Code injection

The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file...

Cross site request forgery (csrf)

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request...