CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

PT-2024-28832 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: A full path disclosure issue allows attackers to obtain the root path of the application via unspecified vectors. This could potentially be exploited to gain...

CVE-2024-40407

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 are vulnerable to a full path disclosure issue. This vulnerability allows an attacker to obtain the root path of the application through unspecified vectors, which could be exploited to reveal sensitive information regarding the ap...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

CVE-2024-40407: Undefined Security Weakness

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

The vulnerability of the component set in the full stack for rapid development of the Filament PHP framework Laravel, related to insecure resource initialization, allows attackers to exploit it to disclose sensitive information.

The vulnerability of the component set of the full stack for the accelerated development of the Filament PHP framework Laravel is related to an insecure initialization of a resource, allowing a malicious actor to exploit this to disclose sensitive information...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

The vulnerability of Schneider Electric EcoStruxure IT Gateway’s software for communicating with controlled devices lies in the absence of authentication procedures, allowing attackers to gain full access to the vulnerable software.

The vulnerability of Schneider Electric EcoStruxure IT Gateway’s software for communicating with controlled devices is related to the absence of an authentication procedure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the vulnerable...

Malicious code in docker-centos-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71090e29427fee974fae520d89e3e7df61c45f9cb63241c5b187c8cf5fd63556 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcore-mnemic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a72a50d12427111f0b683bda37a019abbeeee63bc70ac6278b220df90b87991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa9d0632071e233fdadb5454835f5b7f1486a8369286e650dd81149dbe5a7f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10615 Malicious code in cryptocmopare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39a4a772e0bb03f5192ee69c42db63db859ee0e831d599f762dcf272c9c8e581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bigto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0078b9287cd6f2a8be0150a77862f7e8633d8f3dcf99ce31d4273fcb7b0987b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52650e58d88e598b736b50375a5b7be334cd6d8581a470d2c70624a1bbecbf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ac1d6271bf68f9476a6f0a9e4df3a4764f5a06405e90fcac87968f2a9608d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-bundle-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68813bb35808cbd5a214c8d01a2243e1d1e80df5cd37d11413bbedd08ffd9e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchpad-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b1c1a2444b5a8db795db02aedebf9d8feddb28e3bc8cafcf438c5d8a086f315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the full-screen mode of the Mozilla Firefox Focus browser on Android operating systems allows attackers to carry out spoofing attacks.

The vulnerability of Mozilla Firefox Focus’ full-screen mode on Android operating systems is related to an improper limitation on the number of user interface layers that can be displayed. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

UBUNTU-CVE-2024-50243

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...