5020 matches found
GHSA-VMQV-47J8-GWV8
creationtimestamp| type| source ---|---|--- 2024-03-13 18:11:20+00:00| seen| https://t.me/ctinow/206977...
GHSA-78WX-JG4J-5J6G
creationtimestamp| type| source ---|---|--- 2024-03-13 16:46:43+00:00| seen| https://t.me/ctinow/206876...
CVE-2024-28121 Reflex arbitrary method call in stimulus_reflex
stimulusreflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rails over real-time websockets. In affected versions more methods than expected can be called on reflex instances. Being able to call some of them has security...
CVE-2024-28121
CVE-2024-28121 affects StimulusReflex. A websocket payload targeting a reflex can trigger arbitrary method calls on the reflex instance, because the server locates the method and uses it (via public_send) without strict validation, risking unsafe methods (e.g., instance_variable_set, system). Thi...
GHSA-X2VG-5WRF-VJ6V
creationtimestamp| type| source ---|---|--- 2024-03-11 15:16:32+00:00| seen| https://t.me/ctinow/204761...
GHSA-32F5-3P9H-2RQC
creationtimestamp| type| source ---|---|--- 2024-03-08 10:22:11+00:00| seen| https://t.me/ctinow/203196...
GHSA-MRMM-QMRJ-XGP6
creationtimestamp| type| source ---|---|--- 2024-03-07 18:37:49+00:00| seen| https://t.me/ctinow/202645...
GHSA-6QJ9-33J4-RVHG
creationtimestamp| type| source ---|---|--- 2024-03-07 08:36:09+00:00| seen| https://t.me/ctinow/202193...
GHSA-J857-7RVV-VJ97
creationtimestamp| type| source ---|---|--- 2024-03-06 21:16:28+00:00| seen| https://t.me/ctinow/201812...
GHSA-M4RM-X2RR-357W
creationtimestamp| type| source ---|---|--- 2024-03-06 20:31:20+00:00| seen| https://t.me/ctinow/201774...
GHSA-9PP4-MX6X-XH36
creationtimestamp| type| source ---|---|--- 2024-03-06 20:16:26+00:00| seen| https://t.me/ctinow/201746...
GHSA-5PF6-2QWX-PXM2 vulnerabilities
Vulnerabilities for packages: guac, falcosidekick-fips, falcosidekick...
GHSA-J857-7RVV-VJ97 vulnerabilities
Vulnerabilities for packages: py3-jwcrypto...
GHSA-2WQW-HR4F-XRHH
creationtimestamp| type| source ---|---|--- 2024-03-06 18:16:38+00:00| seen| https://t.me/ctinow/201600...
GHSA-H6J3-J35F-V2X7
creationtimestamp| type| source ---|---|--- 2024-03-06 18:16:33+00:00| seen| https://t.me/ctinow/201596...
GHSA-H59X-P739-982C
creationtimestamp| type| source ---|---|--- 2024-03-06 17:27:06+00:00| seen| https://t.me/ctinow/201544 2024-03-08 02:14:56+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4145...
GHSA-26W3-Q4J8-4XJP
creationtimestamp| type| source ---|---|--- 2024-03-06 16:32:00+00:00| seen| https://t.me/ctinow/201496...
BIT-PARSE-2022-24760 Command Injection in Parse server
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...
BIT-CODEIGNITER-2022-39284
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting $secure or $httponly value to true in Config\Cookie is not reflected in setcookie or Response::setCookie. As a result cookie values are erroneously exposed to scripts. It should be noted that this vulnerability does...