5325 matches found
GitOops - All Paths Lead To Clouds
GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/CD jobs and environment variables...
Security Bulletin: IBM Cloud Pak for Integration is vulnerable to Go vulnerability CVE-2021-31525
Summary IBM Cloud Pak for Integration is vulnerable to Go vulnerability CVE-2021-31525 with details below Vulnerability Details CVEID: CVE-2021-31525 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in net/http. By sending a specially-crafted header to ReadRequest or...
CVE-2021-41773
creationtimestamp| type| source ---|---|--- 2021-10-05 14:37:33+00:00| published-proof-of-concept| https://t.me/cKure/7469 2021-10-05 15:14:23+00:00| seen| https://t.me/ptswarm/79 2021-10-05 15:39:32+00:00| published-proof-of-concept|...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0401
An update of 'apache-tomcat' packages of Photon OS has been released...
[SECURITY] Fedora 33 Update: kernel-tools-5.14.9-100.fc33
This package contains the tools/ directory from the kernel source and the supporting documentation...
Fedora: Security Advisory for kernel-tools (FEDORA-2021-884d245ef8)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: kernel-tools-5.14.9-200.fc34
This package contains the tools/ directory from the kernel source and the supporting documentation...
CVE-2021-40926
Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter...
[SECURITY] Fedora 34 Update: python-flask-restx-0.3.0-2.fc34
Flask-RESTX is an extension for Flask that adds support for quickly building REST APIs. It encourages best practices with minimal setup. If you are familiar with Flask, Flask-RESTX should be easy to pick up. It provides a coherent collection of decorators and tools to describe your API and expose...
_pow is mathematically wrong
Handle 0xsanson Vulnerability details Impact In IndexPool.sol, the function pow is called during the computation of the output amount when swapping. function powuint256 a, uint256 n internal pure returns uint256 output output = n % 2 != 0 ? a : BASE; for n /= 2; n != 0; n /= 2 a = a a; if n % 2 !...
Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) offline documentation
Summary IBM Business Process Manager and IBM Business Automation Workflow offline documentation packages open source libraries with known vulnerabilities. Do not install offline documentation and remove existing installations with the fix provided below. Vulnerability Details CVEID: CVE-2021-2335...
[SECURITY] Fedora 34 Update: python-pillow-8.1.2-5.fc34
Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0394
An update of 'libtiff', 'kubernetes' packages of Photon OS has been released...
ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=12.1.1), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +991 more potentially affected by CVE-2021-40690 via org.apache.santuario:xmlsec (>=2.0.0-beta, <=2.1.6)
org.apache.santuario:xmlsec MAVEN version =2.0.0-beta, =1.0.0.ee-20260424025040, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.4.0.0, =0.7.0.1, =1.0.0, =3.0.0, =6.0.1, =5.0.0, =1.31.0, =1.31.0, =1.31.0, =1.37.1 and more Source cves: CVE-2021-40690 Source advisory:...
Bring Your APIs Out of the Shadows to Protect Your Business
Pankaj Gupta, Senior Director, Citrix APIs are immensely more complex to secure. What was previously one request to one server has become dozens or hundreds of requests to dozens or hundreds of entities. In the past, you defended one large application with a single front door. Now you must defend...
Incorrect access control on Harvester add/remove strategy functions
Handle 0xRajeev Vulnerability details Impact The documentation comments indicate that addStrategy and removeStrategy are gov/strategist only functions which is true for setHarvester and setSlippage but add/remove strategy have the incorrect onlyController modifier instead of onlyStrategist. Proof...
User may receive less than the eligible amount per the shares being withdrawn
Handle 0xRajeev Vulnerability details Impact User may receive less than the eligible amount per the shares being withdrawn. It is not clear under what conditions this happens but needs to be documented and user warned. Proof of Concept Tools Used Manual Analysis Recommended Mitigation Steps...
There is no corresponding setResume() for setHalted()
Handle 0xRajeev Vulnerability details Impact There is no function for setting halted to false, i.e. to resume the halted protocol, unlike pause/unpause. It appears that halted is actually permanent shutdown here. If so, this should be documented clearly. If not, setHalted should take a boolean to...
Pollenisator - Collaborative Pentest Tool With Highly Customizable Tools
Pollenisator is a tool aiming to assist pentesters and auditor automating the use of some tools/scripts and keep track of them. Written in python 3 Provides a modelisation of "pentest objects" : Scope, Hosts, Ports, Commands, Tools etc. Tools/scripts are separated into 4 categories : wave,...