Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2024/02/09 12:0 a.m.4 views

PT-2024-20753 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki affected versions not specified Description: ManageWiki is a MediaWiki extension that allows users to manage wikis. The issue arises because Special:ManageWiki does not properly escape interface messages on the columns and help key...

6.5CVSS6.5AI score0.0029EPSS
Exploits0References10
Malwarebytes
Malwarebytes
added 2023/09/29 11:30 a.m.13 views

Dependabot impersonators cause trouble on GitHub

GitHub is experiencing issues of the "breached account and malicious code" variety. ITPro reports that unnamed individuals have been compromising accounts and using them to install malware capable of password theft. Its a fairly elaborate scam which even includes imitation of GitHubs popular...

7.5AI score
Exploits0
The Hacker News
The Hacker News
added 2023/08/12 6:3 a.m.64 views

New Python URL Parsing Flaw Could Enable Command Execution Attacks

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. "urlparse has a parsing problem when the...

7.5CVSS8.4AI score0.01445EPSS
Exploits3
CNNVD
CNNVD
added 2023/05/03 12:0 a.m.3 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab, which stems from the possibility th...

6.5CVSS6.5AI score0.01921EPSS
Exploits0References5
OSV
OSV
added 2022/10/02 1:38 p.m.3 views

GSD-2022-1006343 sch_sfb: Don't assume the skb is still around after enqueueing to child

schsfb: Don't assume the skb is still around after enqueueing to child This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2021/11/01 12:36 a.m.76 views

CVE-2021-42574

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.5CVSS2.3AI score0.24988EPSS
Exploits4References7
Rows per page
Query Builder