Exploit for Code Injection in Apache Airflow

Apache Airflow official report description says: A vulnerab...

org.openidentityplatform.openam:openam-example-clientsdk-cli (>=14.5.2, <=14.6.6), org.openidentityplatform.openam:openam-example-clientsdk-war (>=14.5.2, <=14.7.2) potentially affected by CVE-2023-37471 via org.openidentityplatform.openam:openam-clientsdk (>=14.5.2, <=14.7.2)

org.openidentityplatform.openam:openam-clientsdk MAVEN version =14.5.2, =14.5.2, =14.5.2, =14.7.2 Source cves: CVE-2023-37471 Source advisory: MEND:CVE-2023-37471...

copyparty vulnerable to path traversal attack

Summary All versions before 1.8.2 have a path traversal vulnerability, allowing an attacker to download unintended files from the server. Details Unauthenticated users were able to retrieve any files which are accessible according to OS-level permissions from the copyparty process. Usually, this ...

de.codecentric:spring-boot-admin-example (1.0.4) potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.0.4)

de.codecentric:spring-boot-admin-server MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.4 Source cves: CVE-2023-38286 Source...

de.codecentric:spring-boot-admin-example (1.0.3) potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.0.3)

de.codecentric:spring-boot-admin-server MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.3 Source cves: CVE-2023-38286 Source...

de.codecentric:spring-boot-admin-example (1.0.2) potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.0.2)

de.codecentric:spring-boot-admin-server MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.2 Source cves: CVE-2023-38286 Source...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-35908 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-35908 Source advisory:...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2022-46651 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2022-46651 Source advisory:...

org.apache.camel:camel-example-cxf (2.4.0), org.apache.camel:camel-jetty (2.4.0) +32 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.1.4.v20100610)

org.eclipse.jetty:jetty-xml MAVEN version 7.1.4.v20100610 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.apache.camel:camel-example-cxf 2.4.0 - org.apache.camel:camel-jetty 2.4.0 -...

MAL-2023-221 Malicious code in cypress-typed-stubs-example-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d06bdef719edee1677bda9a46ae9d713bed145fb60b910c15f7260b2fca5b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

io.jstach:jstachio-jmustache (0.15.0), io.jstach:jstachio-spring (0.15.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.15.0)

io.jstach:jstachio MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.15.0 - io.jstach:jstachio-spring 0.15.0 - io.jstach:jstachio-spring-example 0.15.0 -...

dk.mada.jaxrs:openapi-jaxrs-client (0.9.13), io.jstach:jstachio-jmustache (0.9.1) +2 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.9.1)

io.jstach:jstachio MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - dk.mada.jaxrs:openapi-jaxrs-client 0.9.13 - io.jstach:jstachio-jmustache 0.9.1 - io.jstach:jstachio-spring 0.9.1 -...

io.jstach:jstachio-jmustache (0.9.0), io.jstach:jstachio-spring (0.9.0) +1 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.9.0)

io.jstach:jstachio MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.9.0 - io.jstach:jstachio-spring 0.9.0 - io.jstach:jstachio-spring-example 0.9.0 Source cves:...

io.jstach:jstachio-jmustache (0.11.0), io.jstach:jstachio-spring (0.11.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.11.0)

io.jstach:jstachio MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.11.0 - io.jstach:jstachio-spring 0.11.0 - io.jstach:jstachio-spring-example 0.11.0 -...

io.jstach:jstachio-jmustache (0.14.0), io.jstach:jstachio-spring (0.14.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.14.0)

io.jstach:jstachio MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.14.0 - io.jstach:jstachio-spring 0.14.0 - io.jstach:jstachio-spring-example 0.14.0 -...

io.jstach:jstachio-jmustache (0.10.0), io.jstach:jstachio-spring (0.10.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.10.0)

io.jstach:jstachio MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.10.0 - io.jstach:jstachio-spring 0.10.0 - io.jstach:jstachio-spring-example 0.10.0 -...

io.jstach:jstachio-jmustache (0.9.2), io.jstach:jstachio-spring (0.9.2) +1 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.9.2)

io.jstach:jstachio MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.9.2 - io.jstach:jstachio-spring 0.9.2 - io.jstach:jstachio-spring-example 0.9.2 Source cves:...

dk.mada.jaxrs:openapi-jaxrs-client (>=0.9.14, <=0.9.16), io.jstach:jstachio-jmustache (0.9.3) +2 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.9.3)

io.jstach:jstachio MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - dk.mada.jaxrs:openapi-jaxrs-client =0.9.14, =0.9.16 - io.jstach:jstachio-jmustache 0.9.3 - io.jstach:jstachio-spring 0.9.3 ...

Affiliate Me 5.0.1 SQL Injection

Exploit Title: Affiliate Me Version 5.0.1 - SQL Injection Exploit Date: May 16, 2023. CVSS 3.1: 6.4 Medium CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N Tactic: Initial Access TA0001 Technique: Exploit Public-Facing Application T1190 Application Name: Affiliate Me Application Version:...

PassMute - PassMute - A Multi Featured Password Transmutation/Mutator Tool

This is a command-line tool written in Python that applies one or more transmutation rules to a given password or a list of passwords read from one or more files. The tool can be used to generate transformed passwords for security testing or research purposes. Also, while you doing pentesting it...