10594 matches found
CVE-2024-21725
Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components...
CVE-2024-21726
Inadequate content filtering leads to XSS vulnerabilities in various components...
CVE-2024-21725
Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components...
CVE-2024-21726
Inadequate content filtering leads to XSS vulnerabilities in various components...
CMS Security Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! CMS that stems from insufficient validation of input...
An educational robot security research
In the modern world, we are surrounded by a multitude of smart devices that simplify our daily lives: smart speakers, robotic vacuum cleaners, automatic pet feeders and even entire smart homes. Toy manufacturers are striving to keep up with these trends, releasing more and more models that can al...
Cross site scripting
Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...
PT-2024-20894 · Unknown · Itflow.Org
Name of the Vulnerable Software and Affected Versions: ITFlow.org versions prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the settings.php,...
CVE-2024-25344
Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27132 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27132 Source advisory: OSV:GHSA-6749-M5CP-6CG7...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27133 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27133 Source advisory: OSV:GHSA-3V79-Q7PH-J75H...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27133 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27133 Source advisory: OSV:PYSEC-2024-241...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27132 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27132 Source advisory: OSV:PYSEC-2024-240...
GHSA-CCGV-VJ62-XF9H Spring Web vulnerable to Open Redirect or Server Side Request Forgery
Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect attack or to a SSRF attack if the URL is used after passing validation checks...
UBUNTU-CVE-2024-22243
Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is...
TinyTurla-NG in-depth tooling and command and control analysis
Cisco Talos, in cooperation with CERT.NGO, has discovered new malicious components used by the Turla APT. New findings from Talos illustrate the inner workings of the command and control C2 scripts deployed on the compromised WordPress servers utilized in the compromise we previously disclosed...
MAL-2024-1033 Malicious code in xo-page-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in xo-page-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Multiple Siemens Products Null Pointer Dereference Vulnerability
SIMATIC PCS 7 is a centralized control system DCS that integrates components such as SIMATIC WinCC, SIMATIC Batch, SIMATIC Route control, OpenPCS 7, etc. SIMATIC WinCC is a Supervisory Control and Data Acquisition SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for...
