PT-2024-28703 · Apache · Cloudstack

Name of the Vulnerable Software and Affected Versions: CloudStack versions prior to 4.18.2.1 CloudStack versions prior to 4.19.0.2 Description: The CloudStack integration API service allows running its unauthenticated API server for internal portal integrations and testing purposes. Due to improp...

Robotmk Security Vulnerabilities

Robotmk is an open source Robot framework integration for Checkm k by ELABIT. A security vulnerability exists in Robotmk versions prior to 2.0.1, which stems from a shared holotree usage feature that allows any user to edit any Python environment, resulting in elevated privileges for the local us...

WordPress Integration for Luminate and Gravity Forms Plugin <= 1.3.3 is vulnerable to Backdoor

Software Integration for Luminate and Gravity Forms Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0d71ccb64282 Credits Sansec.io Required privilege...

IBM InfoSphere Information Server Server Side Request Forgery Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. IBM InfoSphere Information Server has a server-side request forgery vulnerability that can be...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2024-30213)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. IBM InfoSphere Information Server suffers from a cross-site request forgery vulnerability that...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2024-30630)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server that stems from...

Unspecified Vulnerability in IBM InfoSphere Information Server (CNVD-2024-30834)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server that originates when a...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2024-37061)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server, which can be...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2024-37065)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server, which can be...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2024-37063)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server that...

CVE-2024-5827

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

PT-2024-4368 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.8 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description: An issue in GitLab CE/EE allows an attacker to trigger a pipeline as another user under certain...

Malicious code in Blockсore.IntegratioոTests.Common (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blockсore.IntеgrаtioոTests.Common (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in apollo-federation-integration-testsuite (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1763 Malicious code in apollo-federation-integration-testsuite (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

CVE-2024-38873

CVE-2024-38873 concerns the TYPO3 extension friendlycaptcha_official (Integration of Friendly Captcha) before version 0.1.4. The issue is that the extension fails to verify the CAPTCHA requirement in submitted form data for the ext:form integration, allowing a remote user to bypass the CAPTCHA ch...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM CICS Transaction Gateway (CVE-2023-50310, CVE-2023-50311)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM CICS Transaction Gateway. This bulletin identifies the steps to take to address these vulnerabilities. Vulnerability Details CVEID:CVE-2023-50310 DESCRIPTION: IBM CICS...

BokuLoader - A Proof-Of-Concept Cobalt Strike Reflective Loader Which Aims To Recreate, Integrate, And Enhance Cobalt Strike's Evasion Features!

A proof-of-concept User-Defined Reflective Loader UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors: Contributor | Twitter | Notable Contributions ---|---|--- Bobby Cooke | @0xBoku | Project original author and maintainer Santiago Pecin | @s4ntiago...