GHSA-2C85-RFCC-G74J Karate Mock Server RCE via embedded expression evaluation of request-derived data

Summary Karate Mock Server can execute embedded expressions found in attacker-controlled HTTP request data when a Mock Server feature assigns request-derived values such as request, requestHeaders, or requestParams to variables. In affected scenarios, an unauthenticated remote attacker can place ...

MAL-2024-2222 Malicious code in down_load_ebook_universo_karate_kid_by_bruno_bertolini_bastos_co2iw (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_universo_karate_kid_by_bruno_bertolini_bastos_co2iw (npm)

--- -= Per source details. Do not edit below this line.=-...

karate-budokan-thun.com Improper Access Control vulnerability OBB-3802326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-lappersdorf.de Improper Access Control vulnerability OBB-3771165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-tkv.de Improper Access Control vulnerability OBB-3765162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-psv-hattingen.de Cross Site Scripting vulnerability OBB-3722790

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-voisins.fr Cross Site Scripting vulnerability OBB-3661484

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-voisins.fr Cross Site Scripting vulnerability OBB-3632216

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-tourny27.fr Cross Site Scripting vulnerability OBB-3435462

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-do-overath.de Cross Site Scripting vulnerability OBB-3245126

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-5X5Q-8CGM-2HJQ Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...

Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...

karate-de-luca.fr Cross Site Scripting vulnerability OBB-2447874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-cochem.de Improper Access Control vulnerability OBB-2411465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-sanktaugustin.de Cross Site Scripting vulnerability OBB-2320142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Learn Karate - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Karate published at the 'play' market has multiple vulnerabilities...

TKO Karate Cross Site Scripting

|=----=----=----=----=----=--------=| | | /\ /\ \ /\ /\ \ everythin's black | //\ /\ \ \L\ \ \ \ \ no turning back | \ \ \ \ \ reg.php Cross Site Scripting Vulnerability |Author :Bl4ck.Viper |Home :Http://t-bh.ir |Archive :Http://exploit-db.ir |Vendor :http://www.kellermartialarts.com/ |Email...