The vulnerability of the ospf_te_parse_ri() function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the ospfteparseri function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems can lead to an out-of-buffer operation. Exploitation of this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the `ospf_te_parse_ext_link()` function in the Opaque LSA Extended Link Parser component of the networking routing implementation software for Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the ospfteparseextlink function in the Opaque LSA Extended Link Parser component of the networking routing implementation software for Unix-like systems is related to the escape operation from the buffer into memory. Exploitation of this vulnerability allows a remote attacker...

EulerOS 2.0 SP9 : cups (EulerOS-SA-2024-2359)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

ALSA-2024:6529 Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

ROS-20240904-01

Vulnerability of the getedge function of the ospfte.c file of the OSPF Daemonr component of the software tool for implementing network routing on Unix-like systems FRRouting is related to resource release errors. network routing on Unix-like systems FRRouting is related to resource release errors...

WordPress Like Button Rating LikeBtn plugin <= 2.6.53 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhammad Daffa Patchstack Alliance in WordPress Plugin Like Button Rating versions = 2.6.53...

WordPress Like Button Rating Plugin <= 2.6.53 is vulnerable to Cross Site Request Forgery (CSRF)

Software Like Button Rating Type Plugin Vulnerable versions = 2.6.53 Fixed in 2.6.54 OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-44064 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 604b9cb063a6 Credits Muhammad Daffa Required...

Malicious code in gltest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 538a0e3540a764042a57930b8729d61b05747d057875504da316d6ee14bf91fd Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in hello-bozzo2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96e02710356e7f0a4dee853d165a2d18a0a4addad3a07c397e495f61f6bc92fa Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

GHSA-88G2-R9RW-G55H gitoxide-core does not neutralize special characters for terminals

Summary The gix and ein commands write pathnames and other metadata literally to terminals, even if they contain characters terminals treat specially, including ANSI escape sequences. This sometimes allows an untrusted repository to misrepresent its contents and to alter or concoct error messages...

Hono CSRF middleware can be bypassed using crafted Content-Type header

Summary Hono CSRF middleware can be bypassed using crafted Content-Type header. Details MIME types are case insensitive, but isRequestedByFormElementRe only matches lower-case. https://github.com/honojs/hono/blob/b0af71fbcc6dbe44140ea76f16d68dfdb32a99a0/src/middleware/csrf/index.tsL16-L17 As a...

CVE-2024-43787

CVE-2024-43787: Hono CSRF middleware can be bypassed via crafted Content-Type header due to MIME-type matching only lower-case isRequestedByFormElementRe; this allows bypass of CSRF protection. Affected: Hono prior to 4.5.8. Impact per sources: CSRF protection bypass (low/partial impact described...

CVE-2024-43787 Hono CSRF middleware can be bypassed using crafted Content-Type header

Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypassed using crafted Content-Type header. MIME types are case insensitive, but isRequestedByFormElementRe only matches lower-case. As a result, attacker can bypass csrf middleware...

PT-2024-6476

Name of the Vulnerable Software and Affected Versions Apache Tomcat Connectors versions 1.2.9-beta through 1.2.49 Description The issue allows local users to view and modify shared memory containing mod jk configuration, which may lead to information disclosure and/or denial of service. This issu...

The vulnerability of the Cargo package manager in the Rust programming language allows a hacker to execute arbitrary code.

The vulnerability of the Cargo package manager in the Rust programming language is related to the ignoring of umask when extracting archives created on UNIX-like systems. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20240729-09

Vulnerability in Cargo package manager of Rust programming language is related to ignoring umask when extracting archives created on UNIX-like systems. when retrieving archives created on UNIX-like systems. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute...

Malicious code in c8tks94kspjghtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9182e332ef5bf851522bb14086c5159f1c606fb90094722f856c87f36e382da7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in pinloggertest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5f6beadd08c32e5fd2f899428285a58ab3d696ef0fc06d2eff10e2d8630fa9a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12343 Malicious code in shinchina (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0a21b3328ab75bc0d00f300ad728fa27c3b3acc2396d7af90522856afe628aca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...