Lucene search
K

8751 matches found

Kitploit
Kitploit
added 2023/04/16 12:30 p.m.128 views

Nmap-API - Uses Python3.10, Debian, python-Nmap, And Flask Framework To Create A Nmap API That Can Do Scans With A Good Speed Online And Is Easy To Deploy

Uses python3.10, Debian, python-Nmap, and flask framework to create a Nmap API that can do scans with a good speed online and is easy to deploy. This is a implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items GET...

7.5AI score
Exploits0References1
Prion
Prion
added 2023/04/16 8:15 a.m.23 views

Design/Logic Flaw

OpenZeppelin Contracts is a library for secure smart contract development. The proposal creation entrypoint propose in GovernorCompatibilityBravo allows the creation of proposals with a signatures array shorter than the calldatas array. This causes the additional elements of the latter to be...

6.5CVSS8.7AI score0.00584EPSS
Exploits0References2Affected Software2
CNVD
CNVD
added 2023/04/16 12:0 a.m.15 views

Siemens Mendix Forgot Password Module Information Disclosure Vulnerability

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. An information disclosure vulnerability exists in the Siemens Mendix Forgot Password module. The vulnerability stems from the fact that the...

5.3CVSS6AI score0.00458EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2023/04/13 8:0 p.m.35 views

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

Google on Thursday outlined a set of initiatives aimed at improving the vulnerability management ecosystem and establishing greater transparency measures around exploitation. "While the notoriety of zero-day vulnerabilities typically makes headlines, risks remain even after they're known and fixe...

6.5AI score
Exploits0
Citrix
Citrix
added 2023/04/13 12:0 a.m.5 views

Microsoft Security Update Validation Report April 2023

Microsoft’s April 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

7AI score
Exploits0
Imperva Blog
Imperva Blog
added 2023/04/12 3:31 a.m.11 views

New Imperva Office & Customer Experience Centre Aims to Meet the Needs of Customers In Singapore & Across Asia Pacific and Japan

Since 2009, Imperva has proudly maintained offices in various countries across the Asia Pacific and Japan APJ region. As the company experiences momentum in this region, we continue to invest in expanding our presence to better support our valued customers, wherever they’re located in APJ. This...

6.6AI score
Exploits0
MSRC
MSRC
added 2023/04/11 7:0 a.m.23 views

Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

Summary Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar wi...

6.7AI score
Exploits0
MSRC
MSRC
added 2023/04/11 7:0 a.m.9 views

Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar with vario...

7.3AI score
Exploits0
OpenVAS
OpenVAS
added 2023/04/10 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2023:1794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.01629EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2023/04/10 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2023:1797-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.06341EPSS
Exploits1References4
HackRead
HackRead
added 2023/04/09 7:55 p.m.18 views

How to Create a Mobile Application for Android OS Step by Step?

By Owais Sultan Android OS is available on 3.3 billion devices in 190 countries across the globe, making Android app development… This is a post from HackRead.com Read the original post: How to Create a Mobile Application for Android OS Step by Step?...

6.7AI score
Exploits0
OpenVAS
OpenVAS
added 2023/04/05 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2023:1747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.03658EPSS
Exploits0References4
Prion
Prion
added 2023/04/04 10:15 p.m.15 views

Cross site request forgery (csrf)

SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protecti...

6.8CVSS8.8AI score0.00557EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/04/04 9:20 p.m.79 views

CVE-2023-29003

CVE-2023-29003 affects SvelteKit CSRF protection. Prior to version 1.15.1, an attacker could bypass CSRF by sending requests with a crafted Content-Type header, enabling cross-site requests from third parties and potentially session takeover. SvelteKit 1.15.1 hardens CSRF by (1) treating text/pla...

8.8CVSS8.9AI score0.00557EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/04/04 9:20 p.m.38 views

CVE-2023-29003 SvelteKit has Insufficient Cross-Site Request Forgery Protection

SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protecti...

8.8CVSS8.7AI score0.00557EPSS
Exploits1References5
Talos Blog
Talos Blog
added 2023/04/04 12:0 p.m.28 views

Typhon Reborn V2: Updated stealer features enhanced anti-analysis and evasion capabilities

The developer of the Typhon Reborn information stealer released version 2 V2 in January, which included significant updates to its codebase and improved capabilities. Most notably, the new version features additional anti-analysis and anti-virtual machine VM capabilities to evade detection and ma...

6.5AI score
Exploits0
OpenVAS
OpenVAS
added 2023/04/04 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2023:1734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00865EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/04/04 12:0 a.m.9 views

Fedora: Security Advisory for ImageMagick (FEDORA-2023-e76c8fab34)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
AlmaLinux
AlmaLinux
added 2023/04/04 12:0 a.m.52 views

Moderate: nodejs:16 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 16.19.1. Security Fixes: glob-parent: Regular Expression Denial of Service...

8.6CVSS8AI score0.02209EPSS
Exploits5References18
AlmaLinux
AlmaLinux
added 2023/04/04 12:0 a.m.40 views

Moderate: nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 18.14.2. Security Fixes: glob-parent: Regular Expression Denial of Service...

7.5CVSS7.4AI score0.02023EPSS
Exploits3References14
Rows per page
Query Builder