CVE-2021-32812

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

PT-2021-19946

Name of the Vulnerable Software and Affected Versions Monkshu versions 2.90 and earlier Description Monkshu is an enterprise application server for mobile apps, responsive HTML 5 apps, and JSON API services. In the frontend HTTP server, there is a reflected cross-site scripting issue. An attacker...

CVE-2021-32812: Improper Neutralization of Input During Web Page Generation

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

LightMe - HTTP Server Serving Obfuscated Powershell Scripts/Payloads

LightMe is a Simple HTTP Server serving Powershell Scripts/Payloads after Obfuscate them and run obfuscation as a service in backgroud in order to keep obfuscate the payloads which giving almost new obfuscated payload on each HTTP request Main Features Obfuscate all powershell files within a...

Security Bulletin: Vulnerabilities identified in IBM HTTP Server shipped with IBM WebSphere Service Registry and Repository (CVE-2020-13938 and CVE-2021-30641)

Summary IBM HTTP Server is shipped as a component of IBM WebSphere Service Registry and Repository. Information about security vulnerabilities affecting IBM HTTP Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

Security Bulletin: Vulnerability in IBM WebSphere HTTP Server affects IBM i2 Analyze

Summary Versions of the IBM Websphere HTTP Server bundled with IBM i2 Analyze have vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM i2 Analyze| IBM i2 Analyze 4.3.1...

Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server used by WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager (CVE-2020-13938, CVE-2021-30641)

Summary IBM HTTP Server used by WebSphere Application Server is/are shipped with IBM Tivoli Federated Identity Manager. Information about security vulnerabilities affecting IBM HTTP Server used by WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer ...

org.ryoframework.core:ryo-application-micronaut (>=1.1.1, <=1.3.1) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.1.2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut =1.1.1, =1.3.1 Source cves:...

com.slack.api:bolt-micronaut (0.99.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.0)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 0.99.0 Source cves: CVE-2021-32769 Source advisory...

com.slack.api:bolt-micronaut (>=1.0.9, <=1.0.11) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.6)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.0.9, =1.0.11 Source cves: CVE-2021-32769 Source...

com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.0.9, <=3.2.5) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.1.0.m2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut =3.0.9, =3.2.5 Source cves:...

com.slack.api:bolt-micronaut (>=0.99.1, <=1.0.2) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =0.99.1, =1.0.2 Source cves: CVE-2021-32769 Source...

org.ryoframework.core:ryo-application-micronaut (>=1.0.3, <=1.0.9), org.ryoframework.next:ryo-adapter-micronaut (1.0.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.1.0)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut =1.0.3, =1.0.9 -...

br.com.zup.beagle:beagle-micronaut-starter (>=1.1.0, <=2.1.0), com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.3.1, <=4.3.0) +12 more potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (>=2.0.0, <=2.5.8)

io.micronaut:micronaut-http-server-netty MAVEN version =2.0.0, =1.1.0, =3.3.1, =1.1.0, =1.3.12, =0.5.0, =2.1.0, =4.13.0, =0.1.0, =0.1.3 - pl.coderion:openfoodfacts-java-wrapper 0.9.3 Source cves: CVE-2021-32769 Source advisory: GHSA-CJX7-399X-P2RJ...

com.slack.api:bolt-micronaut (1.0.7), net.javacrumbs.shedlock:shedlock-micronaut (>=4.9.0, <=4.12.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.4)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.0.7 - net.javacrumbs.shedlock:shedlock-micronaut...

com.slack.api:bolt-micronaut (>=1.0.3, <=1.0.6), info.novatec:micronaut-camunda-bpm-feature (>=0.1.0, <=0.2.2) +2 more potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.3)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.0.3, =0.1.0, =1.0.0.rc1, =1.0.0.rc2 -...

br.com.zup.beagle:beagle-micronaut-starter (>=1.1.0, <=2.1.0), com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.3.1, <=4.3.0) +12 more potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (>=2.0.0, <=2.5.8)

io.micronaut:micronaut-http-server-netty MAVEN version =2.0.0, =1.1.0, =3.3.1, =1.1.0, =1.3.12, =0.5.0, =2.1.0, =4.13.0, =0.1.0, =0.1.3 - pl.coderion:openfoodfacts-java-wrapper 0.9.3 Source cves: CVE-2021-32769 Source advisory: OSV:GHSA-CJX7-399X-P2RJ...

com.github.seratch:jslack-lightning-micronaut (>=3.1.1, <=3.4.2), net.javacrumbs.shedlock:shedlock-micronaut (>=4.0.0, <=4.8.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.2.6)

io.micronaut:micronaut-http-server-netty MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.github.seratch:jslack-lightning-micronaut =3.1.1, =4.0.0, =4.8.0 Source cve...

org.ryoframework.core:ryo-application-micronaut (1.1.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.1.1)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut 1.1.0 Source cves: CVE-2021-327...

com.bertramlabs.plugins:asset-pipeline-micronaut (3.0.7) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.0.1)

io.micronaut:micronaut-http-server-netty MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut 3.0.7 Source cves:...