CVE-2024-31457

Gin-vue-admin (CVE-2024-31457) has a backend code-injection risk via a directory-traversal flaw in the Plugin Template feature. The AutoPlug flow accepts PlugName, and through crafted input (e.g., ../../../server/ and related PoC payloads) an attacker can create or modify folders like api, config...

GHSA-PMF3-C36M-G5CF

creationtimestamp| type| source ---|---|--- 2024-03-19 21:16:11+00:00| seen| https://t.me/ctinow/211934...

GHSA-PHG6-44M7-HX3H

creationtimestamp| type| source ---|---|--- 2024-03-14 21:46:43+00:00| seen| https://t.me/ctinow/208193...

GHSA-G627-R579-RW35

creationtimestamp| type| source ---|---|--- 2024-03-13 21:56:44+00:00| seen| https://t.me/ctinow/207190...

GHSA-GF8P-V3G3-3WPH

creationtimestamp| type| source ---|---|--- 2024-03-13 15:17:10+00:00| seen| https://t.me/ctinow/206766...

ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions

ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...

GHSA-95RX-M9M5-M94V ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions

ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...

GHSA-35JJ-WX47-4W8R

creationtimestamp| type| source ---|---|--- 2024-03-08 21:52:10+00:00| seen| https://t.me/ctinow/203609...

GHSA-C5Q2-7R4C-MV6G

creationtimestamp| type| source ---|---|--- 2024-03-08 00:07:20+00:00| seen| https://t.me/ctinow/202895 2025-02-13 19:15:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4311...

GHSA-MR9J-QQJH-67F2

creationtimestamp| type| source ---|---|--- 2024-03-06 20:46:37+00:00| seen| https://t.me/ctinow/201795...

BIT-GRADLE-2021-29428 Local privilege escalation through system temporary directory

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

GHSA-HFXX-G56F-8H5V

creationtimestamp| type| source ---|---|--- 2024-03-02 17:41:37+00:00| seen| https://t.me/ctinow/198427...

GHSA-PFW6-5RX3-XH3C

creationtimestamp| type| source ---|---|--- 2024-02-29 23:56:24+00:00| seen| https://t.me/ctinow/197130...

GHSA-J2PW-VP55-FQQJ

creationtimestamp| type| source ---|---|--- 2024-02-28 19:46:50+00:00| seen| https://t.me/ctinow/195802...

GHSA-JJXQ-M8H3-4VW5

creationtimestamp| type| source ---|---|--- 2024-02-22 20:46:22+00:00| seen| https://t.me/ctinow/191143...

GHSA-54PV-R62J-9QQC

creationtimestamp| type| source ---|---|--- 2024-02-22 00:36:20+00:00| seen| https://t.me/ctinow/190251 2024-02-22 21:32:47+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4059...

GHSA-6VJF-48FH-VXXJ

creationtimestamp| type| source ---|---|--- 2024-02-21 01:16:58+00:00| seen| https://t.me/ctinow/189079 2024-02-21 13:52:31+00:00| seen| https://t.me/arpsyndicate/3783...

GHSA-XFG6-62PX-CXC2

creationtimestamp| type| source ---|---|--- 2024-02-21 01:16:53+00:00| seen| https://t.me/ctinow/189074 2024-02-21 14:20:19+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3802...

GHSA-9W99-78RJ-HMXQ

creationtimestamp| type| source ---|---|--- 2024-02-21 00:56:33+00:00| seen| https://t.me/ctinow/189055 2024-02-21 15:11:03+00:00| seen| https://t.me/arpsyndicate/3832...

ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`

ASA-2024-002: Default PrepareProposalHandler may produce invalid proposals when used with default SenderNonceMempool Component: Cosmos SDK Criticality: Medium Affected Versions: Cosmos SDK versions = 0.50.3; = 0.47.8 Affected Users: Chain developers, Validator and Node operators Impact: Denial of...