7 matches found
EUVD-2024-46243
Malicious code in bioql PyPI...
CVE-2024-52591
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...
CVE-2024-52591
CVE-2024-52591 affects Misskey, where missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows forging of user profiles and notes across instances. The attack can impersonate both users and federated peers, with forged objects accepted as valid and full inter...
CVE-2024-52591 Missing validation allows spoofed profiles and notes in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...
CVE-2024-52591 Missing validation allows spoofed profiles and notes in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...
CVE-2024-52591 Missing validation allows spoofed profiles and notes in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...
Misskey 输入验证错误漏洞
Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey version 2024.10.1 and earlier, which stems from a lack of validation that could allow an attacker to create fake user profiles and forged...