lambda-tek.es Cross Site Scripting vulnerability OBB-3530303

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lambda-tek.fr Cross Site Scripting vulnerability OBB-3526226

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lambda-tek.es Cross Site Scripting vulnerability OBB-3498933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lambda-tek.it Cross Site Scripting vulnerability OBB-3498927

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

io.quarkus:quarkus-agroal (0.19.0), io.quarkus:quarkus-agroal-deployment (0.19.0) +148 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (0.19.0)

io.quarkus:quarkus-core MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - io.quarkus:quarkus-agroal 0.19.0 - io.quarkus:quarkus-agroal-deployment 0.19.0 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (0.26.0), io.quarkus:io.quarkus.gradle.plugin (0.26.0) +183 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (0.26.0)

io.quarkus:quarkus-core MAVEN version 0.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 0.26.0 - io.quarkus:io.quarkus.gradle.plugin 0.26.0 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (0.27.0), io.quarkus:io.quarkus.gradle.plugin (0.27.0) +329 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (0.27.0)

io.quarkus:quarkus-core MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 0.27.0 - io.quarkus:io.quarkus.gradle.plugin 0.27.0 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.3.4.final), io.quarkus:io.quarkus.gradle.plugin (1.3.4.final) +245 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (1.3.4.final)

io.quarkus:quarkus-core MAVEN version 1.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.3.4.final - io.quarkus:io.quarkus.gradle.plugin 1.3.4.fina...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.6.0.cr1), io.quarkus:io.quarkus.gradle.plugin (1.6.0.cr1) +310 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (1.6.0.cr1)

io.quarkus:quarkus-core MAVEN version 1.6.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.6.0.cr1 - io.quarkus:io.quarkus.gradle.plugin 1.6.0.cr1 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.11.5.final), io.quarkus:io.quarkus.gradle.plugin (1.11.5.final) +528 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (1.11.5.final)

io.quarkus:quarkus-core MAVEN version 1.11.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.11.5.final - io.quarkus:io.quarkus.gradle.plugin...

Maximizing Performance with Wallarm Filtering Nodes in Amazon’s Global Infrastructure

Introduction In todays digital landscape, ensuring the security and performance of web applications is paramount. To achieve optimal protection against cyber threats, organizations deploy web application and API protection WAAPs like Wallarm. However, to truly leverage the benefits of Wallarm,...

lambda-tek.it Cross Site Scripting vulnerability OBB-3468467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

GHSA-RX28-R23P-2QC3 AWS CDK EKS overly permissive trust policies

If you are using the eks.Cluster or eks.FargateCluster construct we need you to take action. Other users are not affected and can stop reading. Impact The AWS Cloud Development Kit CDK allows for the definition of Amazon Elastic Container Service for Kubernetes EKS clusters. eks.Cluster and...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.amazonaws.serverless:aws-serverless-java-container-struts (>=1.9, <=1.9.3), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=5.0.0, <=5.0.2) +50 more potentially affected by CVE-2023-34396 via org.apache.struts:struts2-core (>=6.0.0, <=6.1.2)

org.apache.struts:struts2-core MAVEN version =6.0.0, =1.9, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.4.0, =1.4.1, =1.4.0, =1.4.3 and more Source cves: CVE-2023-34396 Source advisory: GHSA-4G42-GQR...

lambda-tek.fr Cross Site Scripting vulnerability OBB-3378341

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lambda-tek.es Cross Site Scripting vulnerability OBB-3377191

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lambda-tek.it Cross Site Scripting vulnerability OBB-3346192

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lambda-tek.fr Cross Site Scripting vulnerability OBB-3338507

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...