Lucene search
+L

12585 matches found

Veracode
Veracode
added 2024/08/02 2:16 p.m.14 views

Visible Encoding Maps

pheonixappapi is vulnerable to Visible Encoding Maps. The vulnerability is due to map of encoding/decoding languages are visible in code...

4.4CVSS6.7AI score0.0017EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/08/02 7:16 a.m.12 views

AZL-47425 CVE-2024-42461 affecting package reaper for versions less than 3.1.1-11

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...

9.1CVSS6.6AI score0.00617EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/02 7:16 a.m.3 views

DEBIAN-CVE-2024-42461

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...

9.1CVSS6.7AI score0.00617EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/08/01 9:22 p.m.267 views

Exploit for Code Injection in Geoserver

CVE-2024-36401-PoC This repository contains a Proof of Conce...

9.8CVSS10AI score0.99813EPSS
SaveExploits26
OSV
OSV
added 2024/07/31 9:04 p.m.47 views

GHSA-258H-F687-4226 PheonixAppAPI has visible Encoding Maps

Impact This is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc. The issue is that the map of encoding/decoding languages are visible in code. Patches The Problem was patched in 0.2.5, so you should try to upgrade to the...

5.3CVSS4.7AI score0.0017EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/07/31 9:04 p.m.20 views

PheonixAppAPI has visible Encoding Maps

Impact This is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc. The issue is that the map of encoding/decoding languages are visible in code. Patches The Problem was patched in 0.2.5, so you should try to upgrade to the...

4.4CVSS4.7AI score0.0017EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/07/31 8:15 p.m.24 views

CVE-2024-41951

Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4...

4.4CVSS0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/31 7:24 p.m.21 views

CVE-2024-41951 PheonixAppAPI has visible Encoding Maps

Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4...

4.4CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/31 7:24 p.m.68 views

CVE-2024-41951

The CVE-2024-41951 issue affects Pheonix App (PheonixAppAPI) where the map of encoding/decoding languages is visible in the source, described as a moderate impact vulnerability. Root cause: encoding/decoding language mappings exposed in code. Affected versions were prior to 0.2.4, with a patch re...

4.4CVSS4.6AI score0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/31 7:24 p.m.5 views

CVE-2024-41951 PheonixAppAPI has visible Encoding Maps

Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4...

4.4CVSS6.9AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/07/31 2:59 p.m.14 views

httpd: Substitution encoding issue in mod_rewrite

A flaw was found in the modrewrite module of httpd. Due to a substitution encoding issue, specially crafted requests may allow an attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant only to be execut...

9.8CVSS7.1AI score0.02456EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/07/31 10:23 a.m.16 views

httpd: Substitution encoding issue in mod_rewrite

A flaw was found in the modrewrite module of httpd. Due to a substitution encoding issue, specially crafted requests may allow an attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant only to be execut...

9.8CVSS7.1AI score0.02456EPSS
SaveExploits0References5
Veracode
Veracode
added 2024/07/31 5:36 a.m.15 views

Cross-Site Scripting (XSS)

typo3/cms is vulnerable to Cross-Site Scripting XSS.The vulnerability is caused due to improper encoding of editor input, allowing authenticated editors to inject arbitrary HTML...

6.3AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/31 12:00 a.m.9 views

PT-2024-40829 · Unknown · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: A security exception occurs in the JavaLanguageParser.expr function, potentially related to encoding issues in the UTF 8.updatePositions and UTF 8$Encoder.encodeArrayLoop functions...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/31 12:00 a.m.13 views

PT-2024-29659

Name of the Vulnerable Software and Affected Versions Pheonix App versions prior to 0.2.4 Pheonix App versions prior to 0.2.5 Description The issue is related to the map of encoding/decoding languages being visible in the code, which can have a moderate impact, particularly for users who want to...

5.3CVSS6AI score0.0017EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2024/07/31 12:00 a.m.9 views

Pheonix App 安全漏洞

Pheonix App is a powerful Python application from the individual developers at AkshuDev. Pheonix App has a security vulnerability that stems from the mapping of encoding and decoding languages being visible in the code...

4.4CVSS6.6AI score0.0017EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the pppasyncencode function that assumes LCP packets are valid without checking the actual contents of th...

5.5CVSS6.6AI score0.00287EPSS
SaveExploits0References9
Trellix
Trellix
added 2024/07/29 12:00 a.m.28 views

OneDrive Pastejacking

OneDrive Pastejacking: The crafty phishing and downloader campaign By Rafael Pena · July 29, 2024 Over the past few weeks, the Trellix Advanced Research Center has observed a sophisticated Phishing/downloader campaign targeting Microsoft OneDrive users. This campaign heavily relies on social...

7.2AI score
SaveExploits0
Rockylinux
Rockylinux
added 2024/07/26 12:33 p.m.76 views

httpd security update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

9.8CVSS7AI score0.99957EPSS
SaveExploits2
OSV
OSV
added 2024/07/26 10:15 a.m.6 views

DEBIAN-CVE-2024-35296

Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue...

8.2CVSS5.2AI score0.01085EPSS
SaveExploits0References1
Rows per page
Query Builder