Malicious code in @diotoborg/at-eos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c39735caa2d27399c1cdd3e469549b98a191de327828414c58394d48a9b2558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolore-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d08ed35c49b86b0b9e388a63a5da3f44faf85eca7a8d3dd3a4fd5297156502 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Xymon Daemon Gather Information

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xymon Daemon Gather Information', 'Description' = %q This module retrieves information from a Xymon daemon service formerly Hobbit, based on Big...

The vulnerability of the Relay Hosts Configuration function in the Docker-based deployment and email server management tool, mailcow:dockerized, allows a attacker to execute arbitrary code.

The vulnerability of the Relay Hosts Configuration function in the Docker-based deployment and email server management tool, mailcow:dockerized, is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely to execute...

Malicious code in fxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f1f1a280982015f3ff40190b739a28eacd06aa84937889ff629cf2cb7dd63d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

Amazon Linux 2 : ca-certificates (ALAS-2024-2607)

The version of ca-certificates installed on the remote host is prior to 2023.2.68-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2607 advisory. Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while...

CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

DEBIAN-CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

UBUNTU-CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix versions 6.4.15 and 7.0.0rc2, which stems from the fact that an administrator with restricted...

Subscription Health Dashboard Update: Optimize Deployments and Identify Issues

For VM teams navigating the complex realm of cybersecurity tools, ensuring deployment health is paramount. Swift methods are required to pinpoint issues amidst complexity. Challenges such as duplicate entries, ghost hosts, and decommissioned devices can obstruct these views, hindering data...

CVE-2024-22116 Remote code execution within ping script

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

CVE-2024-22116 Remote code execution within ping script

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

CVE-2024-22114

CVE-2024-22114 affects Zabbix where a user with no host permissions can view host counts and other statistics via the System Information Widget in Global View Dashboard. Public sources (Astra Linux, openSUSE, Debian LTS advisories, and Tenable/NASL plugs) confirm this as a Zabbix frontend exposur...

CVE-2024-22114 System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard...

CVE-2024-22114 System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard...

PT-2024-5538 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix versions 6.4.0 through 6.4.15 Zabbix versions 7.0.0alpha1 through 7.0.0rc2 Description: The issue is related to the lack of default escaping for script parameters in the Monitoring Hosts section of Zabbix, allowing an administrator wit...

Malicious code in ampersend-mymove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68f91f3919727e3175e15cbeaa1078a642bb1ed31368c7a8e6cb29c88af407cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...