Expedition: Missing Authentication Leads to Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

A Cosmicsting POC...

CVE-2024-39689

A flaw was found in Certifi, a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certain versions of Certifi recognized root certificates from 'GLOBALTRUST'. However, pursuant to an investigation that identifi...

PYSEC-2024-230

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from GLOBALTRUST. Certifi 2024.07.04 removes root certificates...

CVE-2024-39689 Certifi removes GLOBALTRUST root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

CVE-2024-39689 Certifi removes GLOBALTRUST root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

EUVD-2024-2220

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

Malicious code in @zitterorg/architecto-dolore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d1d9d943ef499e62bd06d3ac0f27d4b43acbb507d5bad680bfe7ce0500c6639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/cum-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11602bb1210f3dda60b24294fab56bd0353ac845e73d9711cde4936c2de87a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/illum-perferendis-consectetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c3bf9aa992411b0245993a478b6e6618a7ceb089afc8b5a9abbc82eb88e72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/sit-expedita (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2408fdfd7ab0b61d420d57c74aee1a82ef3abc65fbc1ff1a89f576f963624297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/amet-minus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c52036c1b28ba6a22f982444901ea3571e1bab6b7cfaa70849ee23ac91d01431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/qui-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f6e506e7ed7c86fa9cbeed8815eee8a649621a23376c32e57da65308035182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quae-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 480d3f3e3987bc89f40f2a74b37c96c4d7e38f033436ec22c337d116940f2f97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/praesentium-ullam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6d744af54053ae1abf2c7716819ee7b15e627012edea83b3ab84ffe5839e71b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/numquam-assumenda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40dbf80466e6d61a5d3a5331f58a83a7b50dfd54cce4a29d3a1bb254b9814df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-authz-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc031877d6efc19470df3d757e067cb9fd38974fd69be4140e854f2ca69840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fc9c1c12e5d675118a2fac283b84b5f05476e9a35c4172ef1b3059da075e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google.fhir.stu3.google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fee906b0dce81401aecdf9ea95b8dd2508264e2d4a489793987c126c996c60ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mageia: Security Advisory (MGASA-2024-0232)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...