GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, kubescape, dgraph, src, up, kubevela, terraform-provider-sendgrid, kubeflow, slsa-verifier, scorecard, k3d, cortex, buildkitd, aactl...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, buildkitd, spark-operator, src, kubeflow-fips, kubeflow, k3d, volume-modifier-for-k8s-fips, aws-efs-csi-driver-fips, dynamic-localpv-provisioner-fips, slsa-verifier, bank-vaults-fips, kubernetes-csi-livenessprobe, aactl, dgraph,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, gke-gcloud-auth-plugin, gobuster, kube-logging-operator, prometheus-pushgateway, dex-k8s-authenticator, flux-helm-controller, prometheus-statsd-exporter-fips, buildkitd, src, stakater-reloader, dynamic-localpv-provisioner, k3d, git-lfs,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, grpcurl, wireguard-go, terraform-provider-sendgrid, buildkitd, dgraph, git-lfs, kubescape, gitness, src, gobuster, kind, nodetaint, kots, flux-helm-controller, flux-notification-controller, conftest, skaffold, certificate-transparency,...

Malware in mc-dxp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

mc-safeways.de Cross Site Scripting vulnerability OBB-3638597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in mc-dxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1d1ce854f3d738b8c31b31ebec021661db3328cba71ffcbb8a8f9f2377b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7958 Malicious code in mc-dxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1d1ce854f3d738b8c31b31ebec021661db3328cba71ffcbb8a8f9f2377b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mc-6411c2dd-ed8a-41b8-8a34-7690-cd.azurewebsites.net Cross Site Scripting vulnerability OBB-3552436

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-nett.no Cross Site Scripting vulnerability OBB-3549121

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross site scripting

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

CVE-2023-36163

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

CVE-2023-36163: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

PT-2023-25463 · Unknown · Ip-Dot Buildagate

Name of the Vulnerable Software and Affected Versions: IP-DOT BuildaGate version BuildaGate5 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL. This is a Cross Site Scripting vulnerability. Recommendations: For IP-DOT...

Exploit for Cross-site Scripting in Buildagate_Project Buildagate

Exploit Title: BuildaGate5library - Reflected Cross-Site Scrip...

mc-nett.no Cross Site Scripting vulnerability OBB-3469646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-6411c2dd-ed8a-41b8-8a34-7690-cdn-endpoint.azureedge.net Cross Site Scripting vulnerability OBB-3440795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-38212

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2-rc5-00047-g7c46948a6e9c Description A flaw exists in the Linux kernel related to the fsl-mc bus driver. Changes introduced by VFIO caused the creation of a pseudo-device as a child of fsl-mc devices, leading ...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

Authorization

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...