PT-2024-9035 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 and 9.1R18.7 Ivanti Policy Secure versions prior to 22.7R1.1 Description: The issue is related to argument injection in Ivanti Connect Secure and Ivanti Policy Secure, which can be exploited by...

IBM DB2 Resource Management DoS

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted queries...

webmap.arcticconnect.ca Cross Site Scripting vulnerability OBB-3938618

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2024-3852 Malicious code in wallet-connect-live-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wallet-connect-live-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2779 Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

MAL-2024-2780 Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

CVE-2024-37228

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

CVE-2024-37228

Improper Control of Generation of Code 'Code Injection' vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through 0.1.0.38...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

CVE-2024-37228

The InstaWP Connect WordPress plugin (versions

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through 0.1.0.38...

org.apache.streampipes:streampipes-backend (>=0.69.0, <=0.90.0), org.apache.streampipes:streampipes-connect-container-master (>=0.69.0, <=0.90.0) +9 more potentially affected by CVE-2024-29868 via org.apache.streampipes:streampipes-resource-management (>=0.69.0, <=0.93.0)

org.apache.streampipes:streampipes-resource-management MAVEN version =0.69.0, =0.69.0, =0.69.0, =0.91.0, =0.70.0, =0.69.0, =0.69.0, =0.69.0, =0.69.0, =0.69.0, =0.91.0, =0.93.0 - org.apache.streampipes:streampipes-service-core-minimal 0.93.0 Source cves: CVE-2024-29868 Source advisory:...

org.apache.streampipes:streampipes-backend (>=0.69.0, <=0.90.0), org.apache.streampipes:streampipes-connect-container-master (>=0.69.0, <=0.90.0) +9 more potentially affected by CVE-2024-29868 via org.apache.streampipes:streampipes-resource-management (>=0.69.0, <=0.93.0)

org.apache.streampipes:streampipes-resource-management MAVEN version =0.69.0, =0.69.0, =0.69.0, =0.91.0, =0.70.0, =0.69.0, =0.69.0, =0.69.0, =0.69.0, =0.69.0, =0.91.0, =0.93.0 - org.apache.streampipes:streampipes-service-core-minimal 0.93.0 Source cves: CVE-2024-29868 Source advisory:...

WordPress plugin InstaWP Connect code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

CVE-2024-37228: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

PT-2024-27397 · Unknown · Instawp Connect

Name of the Vulnerable Software and Affected Versions: InstaWP Connect versions 0.1.0.38 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection. Recommendations: For InstaWP Connect versions 0.1.0.38 a...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-647 advisory. 2024-07-17: CVE-2024-30255 was added to this advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a serve...