Lucene search
K

8 matches found

HackRead
HackRead
added 2024/03/28 4:28 p.m.13 views

PyPI Suspends New Projects and Users Due to Malicious Packages

By Waqas Are you a Python developer? Here's what you need to know! This is a post from HackRead.com Read the original post: PyPI Suspends New Projects and Users Due to Malicious Packages...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.1 views

PT-2024-19826 · Meta · Meta Spark Studio

Name of the Vulnerable Software and Affected Versions: Meta Spark Studio versions prior to v176 Description: When opening a new project, Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute...

7.8CVSS8AI score0.00234EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.2 views

Jetbrains JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a distributed build management and continuous integration tool from Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis, and build issue analysis reporting.A security vulnerability exists in JetBrains TeamCity, which stems from...

5.3CVSS5.6AI score0.00004EPSS
Exploits0References3
NVD
NVD
added 2018/01/18 2:29 p.m.14 views

CVE-2017-18033

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery CSRF vulnerabilities...

6.5CVSS6.7AI score0.00084EPSS
Exploits0References2
Prion
Prion
added 2018/01/18 2:29 p.m.16 views

Cross site request forgery (csrf)

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery CSRF vulnerabilities...

4.3CVSS6.7AI score0.00084EPSS
Exploits0References2Affected Software1
Atlassian
Atlassian
added 2018/01/17 2:15 a.m.46 views

Various Cross-site request forgery(CSRF) vulnerabilities in the Jira-importers-plugin - CVE-2017-18033

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery CSRF vulnerabilities...

6.5CVSS7.1AI score0.00084EPSS
Exploits0Affected Software1
NVD
NVD
added 2011/04/19 7:55 p.m.9 views

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

4.3CVSS7.1AI score0.00157EPSS
Exploits1References6
Cvelist
Cvelist
added 2011/04/19 7:0 p.m.14 views

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

7.1AI score0.00157EPSS
Exploits1References6
Rows per page
Query Builder