Lucene search
+L

52 matches found

Positive Technologies
Positive Technologies
•added 2023/09/15 12:00 a.m.•22 views

PT-2023-31269 · Quay · Quay

Name of the Vulnerable Software and Affected Versions: Quay affected versions not specified Description: A flaw was found in Quay, allowing cross-site request forgery CSRF attacks to force a user to perform unwanted actions in an application. The config-editor page, used to configure the Quay...

6.5CVSS6.3AI score0.00298EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/09/15 12:00 a.m.•21 views

Red Hat Quay Security Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. Red Hat Quay suffers from a security vulnerability that stems from the vulnerability of config-editor pages to clickjacking attacks. An attacker can exploit this...

6.5CVSS6.7AI score0.00548EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/07/07 7:15 p.m.•10 views

CVE-2023-36992

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...

7.2CVSS7.3AI score0.01309EPSS
SaveExploits1References2
Prion
Prion
•added 2023/07/07 7:15 p.m.•33 views

Code injection

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...

5.8CVSS7.3AI score0.01309EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/07 12:00 a.m.•7 views

CVE-2023-36992: Improper Control of Generation of Code

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...

7.2CVSS7.5AI score0.01309EPSS
SaveExploits1References2
Mend
Mend
•added 2023/07/07 12:00 a.m.•2 views

CVE-2023-36992

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...

8.6CVSS0.01309EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/07/07 12:00 a.m.•27 views

PT-2023-25764 · Travianz · Travianz

Name of the Vulnerable Software and Affected Versions: TravianZ versions 8.3.3 through 8.3.4 Description: The issue allows remote attackers to execute PHP code through PHP injection in the config editor on the admin page. Recommendations: For versions 8.3.3 and 8.3.4, consider disabling the confi...

7.2CVSS7.2AI score0.01309EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2023/01/06 12:00 a.m.•22 views

The vulnerability of the Dev UI Config Editor component in the quarkus Java framework, which allows a hacker to execute arbitrary code.

The vulnerability of the Dev UI Config Editor component in the quarkus Java framework is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.32516EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
•added 2022/12/14 1:15 p.m.•20 views

quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE

A vulnerability was found in quarkus. This issue occurs in Dev UI Config Editor, which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS6.1AI score0.32516EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/12/13 1:20 p.m.•24 views

quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE

A vulnerability was found in quarkus. This issue occurs in Dev UI Config Editor, which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS6.1AI score0.32516EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/12/13 1:20 p.m.•63 views

Important: Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update

An update is now available for Red Hat build of Quarkus Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

9.8CVSS7.1AI score0.32516EPSS
SaveExploits1References7
Veracode
Veracode
•added 2022/11/30 4:15 a.m.•54 views

Remote Code Execution (RCE)

quarkus-vertx-http is vulnerable to remote code execution. The vulnerability exists in multiple functions due to drive-by localhost attacks which allows an attacker to inject and execute malicious query parameters via the Dev UI Config Editor...

9.8CVSS9.5AI score0.32516EPSS
SaveExploits0References7Affected Software2
Github Security Blog
Github Security Blog
•added 2022/11/22 9:30 p.m.•57 views

Code injection in quarkus dev ui config editor

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS9.3AI score0.32516EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/11/22 9:30 p.m.•36 views

GHSA-G56W-CWG4-HXX9 Code injection in quarkus dev ui config editor

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS8.7AI score0.32516EPSS
SaveExploits0References6
NVD
NVD
•added 2022/11/22 7:15 p.m.•58 views

CVE-2022-4116

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS0.32516EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/22 7:15 p.m.•39 views

Remote code execution

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

7.5CVSS9.6AI score0.32516EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2022/11/22 8:26 a.m.•50 views

CVE-2022-4116

A vulnerability was found in quarkus. This issue occurs in Dev UI Config Editor, which is vulnerable to drive-by localhost attacks leading to remote code execution...

7.5CVSS4.6AI score0.32516EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/22 12:00 a.m.•23 views

PT-2022-6100 · Quarkus · Quarkus

Name of the Vulnerable Software and Affected Versions: quarkus affected versions not specified Description: The issue is related to the Dev UI Config Editor component of the quarkus Java framework, which is vulnerable to remote code execution due to incorrect code generation management. This can...

9.8CVSS8AI score0.32516EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/22 12:00 a.m.•2 views

CVE-2022-4116: Undefined Security Weakness

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS6.1AI score0.32516EPSS
SaveExploits0References1
Mend
Mend
•added 2022/11/22 12:00 a.m.•5 views

CVE-2022-4116

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS0.32516EPSS
SaveExploits0References7
Rows per page
Query Builder