PT-2026-31594

Name of the Vulnerable Software and Affected Versions Marimo versions prior to 0.23.0 Description A pre-authentication remote code execution issue exists in the terminal WebSocket endpoint "/terminal/ws". Unlike other endpoints such as "/ws", this specific endpoint fails to call the validate auth...

EUVD-2000-0248

Malware in sbrugna...

Rockwell Automation 16 Point Fast Response DC Sourcing Input Module 1746-ITV16 Discrete I/O

Binary data 753996.prm...

Unikrn: Escaping images directory in S3 bucket when saving new avatar, using Path Traversal in filename

Thanks again @sp1d3rs, also for the summary. Nothing to add from our side except maybe for the wish for more reports having this quality. Final comment: nothing from that bucket was ever exposed to any user except the uploader, also nothing in the bucket is there for real archiving purposes. I wa...

WordPress Plugin Podlove Podcast Publisher Cross Site Scripting and SQL Injection Vulnerabilities

The second plugin that will be dissected is called Podlove Publisher, a Wordpress plugin to manage podcasts. It suffered from multiple SQL injections and cross-site scripting vulnerabilities funnily enough also in a parameter named tab that are fixed by now. The SQL injections were all caused by...

eEye Digital Security IRIS 1.0.1 GET Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2278/info A maliciously-formed packet sent to Iris by a remote attacker, upon opening in the program for analysis by a user, will cause Iris to terminate. The crash is caused by an inability of Iris to handle packets with...

Open Auto Classifieds <= 1.5.9 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Open Auto Classifieds = 1.5.9 Multiple Remote Vulnerabilities ============================================================== MorningStar Security - Advisory...

CVE-2001-0122

Kernel leak in AfpaCache module of the Fast Response Cache Accelerator FRCA component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error...

CVE-2000-0249

The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...

CVE-2000-0249

The FRCA vulnerability in AIX allows local users to modify arbitrary files via the frcactrl configuration capability when the FRCA kernel module is loaded. A root-privilege escalation is possible because the setuid frcactrl enables non-root users to manipulate FRCA configuration and log files. Af...

CVE-2000-0249

The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...