EUVD-2020-6470

Malware in sbrugna...

Malware in @monterosa-sdk/enmasse

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @monterosa-sdk/enmasse (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795b70f3573a5b3e3d743147318ca12a1a0f5c77af1f7d584d82429855656fe3 Any computer that has this package installed or running should be considered...

CVE-2020-14319

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...

CVE-2020-14319

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...

Cross site request forgery (csrf)

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...

CVE-2020-14319

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...

CVE-2020-14319

The CVE-2020-14319 entry concerns a Cross-Site Request Forgery (CSRF) vulnerability in the AMQ Online console. Affected are AMQ Online versions prior to 1.5.2 and Enmasse versions 0.31.0-rc1 up to, but not including, 0.32.2. The flaw stems from insufficient preflight checks, enabling CSRF when au...

PT-2020-13973

Name of the Vulnerable Software and Affected Versions AMQ Online versions prior to 1.5.2 Enmasse versions 0.31.0-rc1 through 0.32.2 Description A Cross-Site Request Forgery CSRF issue was discovered, which can be exploited when preflight checks are not performed or are bypassed. This can affect...

CVE-2020-14319: Cross-Site Request Forgery (CSRF)

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...

Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection

Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15 Google Dork: inurl:component/enmasse/ PoC: id Parameter...