Malicious code in kubernetes-ingest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f1c68300a7f6418f22b2d03045f8c5e5481483ef206d8bebf724f253a8241e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4237 Malicious code in kubernetes-ingest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f1c68300a7f6418f22b2d03045f8c5e5481483ef206d8bebf724f253a8241e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ashion-ingest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad4c75662335912e6d8e0204f1fbb9857848d827e940184a5d1f4a38c10c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1132 Malicious code in ashion-ingest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad4c75662335912e6d8e0204f1fbb9857848d827e940184a5d1f4a38c10c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29237

Opencast is a free and open source solution for automated video capture and distribution at scale. Prior to Opencast 10.14 and 11.7, users could pass along URLs for files belonging to organizations other than the user's own, which Opencast would then import into the current organization, bypassin...

PT-2022-19487

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 10.14 and 11.7 Description Opencast is a free and open source solution for automated video capture and distribution at scale. Prior to versions 10.14 and 11.7, users could pass along URLs for files belonging to...

CVE-2022-29237: Improper Authentication

Opencast is a free and open source solution for automated video capture and distribution at scale. Prior to Opencast 10.14 and 11.7, users could pass along URLs for files belonging to organizations other than the user's own, which Opencast would then import into the current organization, bypassin...

CVE-2021-43821

Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast before version 9.10 or 10.6 allows references to local file URLs in ingested media packages, allowing attackers to include local files from Opencast's host machines and making them available via the web interfac...

CVE-2021-43821: Files or Directories Accessible to External Parties

Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast before version 9.10 or 10.6 allows references to local file URLs in ingested media packages, allowing attackers to include local files from Opencast's host machines and making them available via the web interfac...

PT-2021-7434

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 9.10 Opencast versions prior to 10.6 Description The issue allows attackers to include local files from Opencast's host machines and make them available via the web interface. This is possible because Opencast would...

Opencast < 9.6 DoS Vulnerability

Opencast is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2021-32623

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

CVE-2021-32623

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

CVE-2021-32623

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

Double free

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

CVE-2021-32623 Opencast vulnerable to billion laughs attack (XML bomb)

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

PT-2021-19815

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 9.6 Description Opencast is vulnerable to the billion laughs attack, which allows an attacker to easily execute a denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit thi...

CVE-2021-32623: Improper Restriction of Recursive Entity References in DTDs

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

Serverless, Low Cost, Threat Intel Aggregation: ElasticIntel

ElasticIntel is serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch. It is an alternative to expensive threat intel aggregation platforms which ingest the same data feeds you could get for free. ElasticIntel is designed to provide a central,...