1240 matches found
GitHub: CVE-2024-32004 Remote Code Execution while cloning special-crafted local repositories
...
GHSA-WFM5-V35H-VWF4
creationtimestamp| type| source ---|---|--- 2024-05-14 01:13:35+00:00| published-proof-of-concept| https://t.me/CNArsenal/2483...
CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability
gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...
CVE-2024-31457
Gin-vue-admin (CVE-2024-31457) has a backend code-injection risk via a directory-traversal flaw in the Plugin Template feature. The AutoPlug flow accepts PlugName, and through crafted input (e.g., ../../../server/ and related PoC payloads) an attacker can create or modify folders like api, config...
CVE-2024-30252 GitHub Security Lab (GHSL) Vulnerability Report, livemarks: `GHSL-2024-015`
Livemarks is a browser extension that provides RSS feed bookmark folders. Versions of Livemarks prior to 3.7 are vulnerable to cross-site request forgery. A malicious website may be able to coerce the extension to send an authenticated GET request to an arbitrary URL. An authenticated request is ...
GHSA-PMF3-C36M-G5CF
creationtimestamp| type| source ---|---|--- 2024-03-19 21:16:11+00:00| seen| https://t.me/ctinow/211934...
GHSA-PHG6-44M7-HX3H
creationtimestamp| type| source ---|---|--- 2024-03-14 21:46:43+00:00| seen| https://t.me/ctinow/208193...
GHSA-G627-R579-RW35
creationtimestamp| type| source ---|---|--- 2024-03-13 21:56:44+00:00| seen| https://t.me/ctinow/207190...
GHSA-GF8P-V3G3-3WPH
creationtimestamp| type| source ---|---|--- 2024-03-13 15:17:10+00:00| seen| https://t.me/ctinow/206766...
GHSA-95RX-M9M5-M94V ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...
GHSA-35JJ-WX47-4W8R
creationtimestamp| type| source ---|---|--- 2024-03-08 21:52:10+00:00| seen| https://t.me/ctinow/203609...
GHSA-C5Q2-7R4C-MV6G
creationtimestamp| type| source ---|---|--- 2024-03-08 00:07:20+00:00| seen| https://t.me/ctinow/202895 2025-02-13 19:15:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4311...
GHSA-MR9J-QQJH-67F2
creationtimestamp| type| source ---|---|--- 2024-03-06 20:46:37+00:00| seen| https://t.me/ctinow/201795...
GHSA-RV35-69FF-G9GV
creationtimestamp| type| source ---|---|--- 2024-03-06 20:46:35+00:00| seen| https://t.me/ctinow/201793...
BIT-GRADLE-2021-29428 Local privilege escalation through system temporary directory
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...
GHSA-HFXX-G56F-8H5V
creationtimestamp| type| source ---|---|--- 2024-03-02 17:41:37+00:00| seen| https://t.me/ctinow/198427...
GHSA-PFW6-5RX3-XH3C
creationtimestamp| type| source ---|---|--- 2024-02-29 23:56:24+00:00| seen| https://t.me/ctinow/197130...