CVE-2019-15967

creationtimestamp| type| source ---|---|--- 2024-02-28 08:36:53+00:00| seen| https://t.me/ctinow/195194...

CVE-2024-25841

In the module "So Flexibilite" soflexibilite from Common-Services for PrestaShop 4.1.26, a guest authenticated customer can perform Cross Site Scripting XSS injection...

Cross site scripting

In the module "So Flexibilite" soflexibilite from Common-Services for PrestaShop 4.1.26, a guest authenticated customer can perform Cross Site Scripting XSS injection...

CVE-2019-5852

creationtimestamp| type| source ---|---|--- 2024-02-27 15:16:18+00:00| seen| https://t.me/ctinow/194472...

CVE-2023-7016

creationtimestamp| type| source ---|---|--- 2024-02-27 12:31:53+00:00| seen| https://t.me/ctinow/194302 2024-02-27 12:32:04+00:00| seen| https://t.me/ctinow/194313 2024-03-19 10:41:06+00:00| seen| https://t.me/ctinow/211330...

CVE-2019-13701

creationtimestamp| type| source ---|---|--- 2024-02-27 10:41:46+00:00| seen| https://t.me/ctinow/194210...

CVE-2023-6584

creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:07+00:00| seen| https://t.me/ctinow/194181 2024-02-27 10:26:27+00:00| seen| https://t.me/ctinow/194195...

CVE-2019-13670

creationtimestamp| type| source ---|---|--- 2024-02-27 09:16:41+00:00| seen| https://t.me/ctinow/194141...

CVE-2024-1698

creationtimestamp| type| source ---|---|--- 2024-02-27 07:26:48+00:00| seen| https://t.me/ctinow/194050 2024-02-27 07:31:53+00:00| seen| https://t.me/ctinow/194054 2024-03-14 11:21:25+00:00| seen| https://t.me/ctinow/207635 2024-03-15 16:50:07+00:00| seen| https://t.me/arpsyndicate/4228 2024-03-1...

CVE-2024-25841

In the module "So Flexibilite" soflexibilite from Common-Services for PrestaShop 4.1.26, a guest authenticated customer can perform Cross Site Scripting XSS injection...

CVE-2024-25841

CVE-2024-25841 affects PrestaShop via the So Flexibilite module from Common-Services. The vulnerability allows a guest (authenticated customer) to perform a Cross Site Scripting (XSS) injection in versions earlier than 4.1.26. Root cause details are not provided beyond the XSS in this module. The...

CVE-2019-4561

creationtimestamp| type| source ---|---|--- 2024-02-26 07:36:57+00:00| seen| https://t.me/ctinow/193133...

Malicious code in virtuoso-ui-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e312940c270bdfe72147c1582e1a07fef45096820038e878c4f91bdd444c03dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@adamlonsdale/backstage-plugin-armorcode-backend (>=0.0.1-alpha, <=0.0.4), @austin-garrard/backstage-plugin-backend (>=0.0.1-alpha.22, <=0.0.1) +194 more potentially affected by CVE-2024-26150 via @backstage/backend-common (>=0.0.0-nightly-20220708025041, <=0.17.0)

@backstage/backend-common NPM version =0.0.0-nightly-20220708025041, =0.0.1-alpha, =0.0.1-alpha.22, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-20220709024234, =0.0.0-nightly-20220811024336, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20220709024234, =0.0.0-nightly-2021101322257,...

CVE-2024-26150 `@backstage/backend-common` vulnerable to path traversal through symlinks

@backstage/backend-common is a common functionality library for backends for Backstage, an open platform for building developer portals. In @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the resolveSafeChildPath utility were not exhaustive enough, leadi...

CVE-2024-26150

CVE-2024-26150 affects @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, where path checks in resolveSafeChildPath were not exhaustive, enabling potential path traversal if symlinks are injected. The issue is publicly documented across multiple sources (NVD, GHSA advisory, ...

CVE-2019-19074

creationtimestamp| type| source ---|---|--- 2024-02-23 12:11:20+00:00| seen| https://t.me/ctinow/191672...

OESA-2024-1198 containers-common security update

This package contains common configuration files and documentation for container tools ecosystem, such as Podman, Buildah and Skopeo. Security Fixes: Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP wi...

PT-2024-21301 · Npm · @Backstage/Backend-Common

Name of the Vulnerable Software and Affected Versions: @backstage/backend-common versions prior to 0.21.1 @backstage/backend-common versions prior to 0.20.2 @backstage/backend-common versions prior to 0.19.10 Description: The issue concerns the @backstage/backend-common library, where paths check...

CVE-2024-24817

creationtimestamp| type| source ---|---|--- 2024-02-22 19:28:14+00:00| seen| https://t.me/ctinow/191047 2024-02-22 19:28:16+00:00| seen| https://t.me/ctinow/191049 2024-03-13 14:46:39+00:00| seen| https://t.me/ctinow/206748 2025-02-06 02:44:20+00:00| seen|...