2393 matches found
PT-2024-33668 · Librenms · Librenms +1
Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.10.0 Description: The application fails to properly sanitize user input, allowing an attacker to execute malicious JavaScript code. This issue occurs when a user with an Admin role adds Notes to a device and the...
org.apache.myfaces.extensions.scripting:myfaces20-example (>=1.0, <=1.0.6), org.apache.myfaces.trinidad:trinidad-demo (>=2.0.0-beta-1, <=2.1.2) +2 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.0.0.ga)
org.hibernate:hibernate-validator MAVEN version 4.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.apache.myfaces.extensions.scripting:myfaces20-example =1.0, =2.0.0-beta-1, =5.3.0,...
com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.27.final)
io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...
Malicious code in dre-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29592555095a1b8521f2ae36968975aec4436b3690547f7cf9348e330312957d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10482 Malicious code in dre-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29592555095a1b8521f2ae36968975aec4436b3690547f7cf9348e330312957d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Leverage the Power of 45k, free, Hugging Face Models with Spring AI and Ollama
This blog post is co-authored by our great contributor Thomas Vitale. Ollama now supports all GGUF models from Hugging Face , allowing access to over 45,000 community-created models through Spring AI's Ollama integration, runnable locally. We'll explore using this new feature with Spring AI. The...
Malicious code in omise-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd9b3fdf30ee1fe797c8e5dae15567ab22d58f003ac1d570f2b6655af66dd5a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9427 Malicious code in omise-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd9b3fdf30ee1fe797c8e5dae15567ab22d58f003ac1d570f2b6655af66dd5a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in omise-example
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in isomorphic-random-example (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9673 Malicious code in isomorphic-random-example (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in example-gtm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9607 Malicious code in example-gtm (npm)
--- -= Per source details. Do not edit below this line.=-...
com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +32 more potentially affected by CVE-2024-8883 via org.keycloak:keycloak-services (18.0.1)
org.keycloak:keycloak-services MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 -...
Malicious code in braintree_express_example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d099bf20fe3b1d17efadfd0e185e8a178edf635e5754d26c3710e5b99c2a1404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-43485
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service. Mitigation Red Hat has investigated whether a possible mitigation exists for this...
Exploit for Code Injection in Crushftp
EN GenCrushSSTIExploit is a PoC exploit tool targeting the...
Malicious code in arkose-vue2-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9008418a813522522804dfaf58f73128ae52ca85667b506962284ddbfc3141bf The OpenSSF Package Analysis project identified 'arkose-vue2-example' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...
com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +84 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.1.1.release)
org.springframework:spring-web MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4, =1.0....