Exploit for Path Traversal in Aiohttp

CVE-2024-23334 PoC Description This repository contains a...

CVE-2024-27100 Denial of service via Staff Actions in Discourse

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

CVE-2024-27756

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...

PT-2024-5872 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.13 Description: The issue is related to CSV injection, where an attacker can create an asset with a crafted title, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability o...

CVE-2024-27756

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...

CVE-2024-27756

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...

CVE-2024-27756

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...

CVE-2024-27756: Improper Control of Generation of Code

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...

PT-2024-21649 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest stable, beta, and tests-passed versions Description: The issue affects the endpoints for suspending users, silencing users, and exporting CSV files, which do not enforce limits on the sizes of the...

CVE-2024-27100: Uncontrolled Resource Consumption

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

Fortinet FortiClient Enterprise Management Server CSV Injection

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS lies in the absence of mechanisms for neutralizing elements in CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes or commands by sending specially crafted packets...

Input validation

IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file...

Fortinet FortiClientEMS CSV Injection Vulnerability

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. Fortinet FortiClientEMS suffers from...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-csv-generator-deployment (3.0.4), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (3.0.4) +2 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.7.3.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-csv-generator-deployment...

io.automatiko.quarkus:automatiko-operator-deployment (0.14.0), io.quarkiverse.operatorsdk:quarkus-operator-sdk-bundle-generator-deployment (4.0.0.beta1) +4 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.7.5.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.7.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.14.0 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-csv-generator-deployment (>=3.0.8, <=3.0.9), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (>=3.0.8, <=3.0.9) +2 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.7.6.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.7.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-csv-generator-deployment...

ROS-2-1421

2.1421 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

CVE-2023-47534

A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions,...

Input validation

A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2023-47534

A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions,...