PT-2024-24457 · Python +1 · Cpython +1

Name of the Vulnerable Software and Affected Versions: CPython versions 3.5 through latest Description: The issue arises from the "socket" module's pure-Python fallback for the socket.socketpair function on platforms that don't support AF UNIX, such as Windows. This implementation uses AF INET or...

CVE-2024-42049

TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection...

jetty: stop accepting new connections from valid clients

A flaw was found in Jetty, a Java based web server and servlet engine. If an HTTP/2 connection gets TCP congested, it remains open and idle, and connections may be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file...

jetty: stop accepting new connections from valid clients

A flaw was found in Jetty, a Java based web server and servlet engine. If an HTTP/2 connection gets TCP congested, it remains open and idle, and connections may be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2025-16722)

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to display XSS stored on the connection page...

CWA 2405: Application launch fails after upgrading to CWA 2405

After upgrading CWA to 2405 app launch may fail with "Internal error" or "Connection Timeout". The issue is seen more frequently while trying to launch multiple applications at the same time. The ICA file gets downloaded but after sometime, "Connection timeout" error is seen. Sometimes, the first...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41829

CVE-2024-41829 concerns JetBrains TeamCity prior to 2024.07. The vulnerability arises from the Space integration (Space module Space Application connection), where an OAuth code for JetBrains Space could be stolen due to weaknesses in the authentication flow. Affected software: JetBrains TeamCity

CVE-2024-41829

In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

JetBrains TeamCity is affected by a stored XSS vulnerability on the Show Connection page for versions prior to 2024.07. Root cause: lack of proper input handling/sanitization on the Show Connection UI element, enabling stored XSS when user interaction occurs. Impact is limited to cross-site scrip...

Configuring a Host connection to Azure Gov Secret

When attempting to configure a Host in Citrix DAAS for Azure Gov Secret, it is not one of the options in the GUI...

Vulnerability of the Server component: Connection Handling of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component: Connection Handling in the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2024-2030)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to display XSS stored on the connection page...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Medium: golang

Issue Overview: The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational 200 or higher status. This mishandling could leave a client connection in an invalid state, where the next request sent on the...

PT-2024-5468 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to the lack of protection of the web page structure in the Show Connection element of the JetBrains TeamCity continuous integration and delivery CI/CD system. This...