GHSA-F8JP-2QGX-V4HF

creationtimestamp| type| source ---|---|--- 2023-12-29 11:50:05+00:00| seen| https://t.me/arpsyndicate/2245...

GHSA-X3F3-J7QH-9WGJ

creationtimestamp| type| source ---|---|--- 2023-12-29 11:35:52+00:00| seen| https://t.me/arpsyndicate/2242...

GHSA-CVG5-HJH8-246X

creationtimestamp| type| source ---|---|--- 2023-12-29 09:19:16+00:00| seen| https://t.me/arpsyndicate/2223...

GHSA-F5VV-HCGF-XVXQ

creationtimestamp| type| source ---|---|--- 2023-12-29 08:53:18+00:00| seen| https://t.me/arpsyndicate/2217...

GHSA-WQQW-R8C5-J67C

creationtimestamp| type| source ---|---|--- 2023-12-22 08:51:31+00:00| seen| https://t.me/ctinow/158244...

GHSA-G2GP-X888-6XRJ

creationtimestamp| type| source ---|---|--- 2023-12-22 08:21:46+00:00| seen| https://t.me/ctinow/158236...

GHSA-3F39-6537-3CGC

creationtimestamp| type| source ---|---|--- 2023-12-20 12:36:53+00:00| seen| https://t.me/ctinow/156931...

GHSA-HFMC-7525-MJ55

creationtimestamp| type| source ---|---|--- 2023-12-18 20:31:41+00:00| seen| https://t.me/ctinow/156090...

GHSA-3P6J-M8J2-M6RC

creationtimestamp| type| source ---|---|--- 2023-11-22 17:10:36+00:00| seen| https://t.me/arpsyndicate/359...

GHSA-QQVQ-6XGJ-JW8G

creationtimestamp| type| source ---|---|--- 2023-11-21 07:53:58+00:00| seen| https://t.me/arpsyndicate/313...

@glarus-labs/vendure-social-auth (>=0.0.1 <=0.1.1), @mirahi/vendure-adyen-dropin-plugin (>=0.0.1 <=0.0.5) +40 more potentially affected by unknown CVE via @vendure/core (>=0.11.1 <=2.1.2)

@vendure/core NPM version =0.11.1, =0.0.1, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WM63-7627-CH33...

Malicious code in vader-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1011ad5820edf4133971eeebc94ab36b715c17b0f12059f941506ec89ec64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-7C2Q-5QMR-V76Q DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998

Impact ESAPI 2.5.2.0 and later addressed the DoS vulnerability described in CVE-2023-24998, which Apache Commons FileUpload 1.5 attempted to remediate. But while writing up a new security bulletin regarding the impact on the affected ESAPI HTTPUtilities.getFileUploads methods or more specifically...

GHSA-J87X-J6MH-MV8V

creationtimestamp| type| source ---|---|--- 2023-10-16 12:20:37+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9208 2023-10-18 05:13:30+00:00| published-proof-of-concept| https://t.me/apsecurity/196 2023-10-18 05:13:30+00:00| published-proof-of-concept|...

Design/Logic Flaw

OpenComputers is a Minecraft mod that adds programmable computers and robots to the game. This issue affects every version of OpenComputers with the Internet Card feature enabled; that is, OpenComputers 1.2.0 until 1.8.3 in their most common, default configurations. If the OpenComputers mod is...

Thruk Monitoring Web Interface 3.06 - Path Traversal

Exploit Title: Thruk Monitoring Web Interface 3.06 - Path Traversal Date: 08-Jun-2023 Exploit Author: Galoget Latorre @galoget CVE: CVE-2023-34096 Galoget Latorre Vendor Homepage: https://thruk.org/ Software Link: https://github.com/sni/Thruk/archive/refs/tags/v3.06.zip Software Link + Exploit +...

Spoofing

SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. The spicedb serve command contains a flag named --grpc-preshared-key which is used to protect the gRPC API from being accessed by unauthorized requests. The...

SUSE CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

CVE-2023-23619

Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue...

CVE-2023-23619

The CVE-2023-23619 vulnerability affects @asyncapi/modelina (Modelina) prior to version 1.0.0. It enables code injection through default presets or when users do not handle rendering themselves. The issue is partially mitigated in 1.0.0, per GHSA guidance: if you only access constrained models, t...