991 matches found
A Bootiful Podcast: Johannes Bechberger, Java engineer at SAP
Hi, Spring fans! In this installment I talk to Johannes Bechberger, Java engineer working on profilers and their underlying technology in the SapMachine team at SAP. His work today comprises many open-source contributions and his blog, where he regularly writes on in-depth profiling and debugging...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: wireguard-go, grafana-rollout-operator, boring-registry, kube-vip, k6, minify, sbomqs, thanos-operator, kserve-rest-proxy, octo-sts, nginx-prometheus-exporter, ip-masq-agent, git-lfs, metallb, wuzz, cloudnative-pg, sftpgo, delve, descheduler, dive, newrelic-nri-stats...
CVE-2024-22590
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...
Malicious code in pulumi-eks-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-863 Malicious code in pulumi-eks-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Real Time Logic SharkSSL 安全漏洞
Real Time Logic SharkSSL is an embedded SSL/TLS client and server solution from Real Time Logic. A security vulnerability exists in Real Time Logic SharkSSL. An attacker could exploit this vulnerability to trigger a denial of service via a malformed Client-Hello message...
CVE-2024-53379
Real Time Logic SharkSSL (embedded SSL/TLS) is affected by a heap buffer overflow in the server site handshake code, starting from the 05/05/24 version (commit 64808a5e12c83b38f85c943dee0112e428dc2a43). The vulnerability allows a remote attacker to trigger a Denial-of-Service via a malformed Clie...
PT-2025-2962 · Sharkssl · Sharkssl
Name of the Vulnerable Software and Affected Versions: SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 Description: A heap buffer overflow in the server site handshake implementation allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hell...
CVE-2024-54338
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in christerf Hello Event Widgets For Elementor hello-event-widgets-for-elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through = 1.0.2...
CVE-2024-54338
CVE-2024-54338 affects Hello Event Widgets For Elementor (WordPress) and allows DOM-based XSS due to improper neutralization of user input during web page generation for Hello Event Widgets For Elementor
CVE-2024-54338 WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christer Fernstrom Hello Event Widgets For Elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through 1.0.2...
CVE-2024-12572
The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...
CVE-2024-12572
CVE-2024-12572 affects the Hello In All Languages WordPress plugin (versions up to and including 1.0.6). The vulnerability is Cross-Site Request Forgery due to missing or incorrect nonce validation on a function, enabling unauthenticated attackers to update plugin settings and inject malicious sc...
WordPress plugin Hello Event Widgets For Elementor 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
PT-2024-36222 · Christer Fernstrom · Hello Event Widgets For Elementor
Name of the Vulnerable Software and Affected Versions: Hello Event Widgets For Elementor versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This problem...
WordPress Hello in All Languages plugin <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Rei Kobayashi in WordPress Plugin Hello In All Languages versions = 1.0.6...
WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Hello Event Widgets For Elementor versions = 1.0.2...
MAL-2024-11465 Malicious code in take4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...